LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities

High Nessus Plugin ID 34472


The remote Windows host has an ActiveX control that is affected by multiple remote buffer overflows.


The remote host contains the LPViewer ActiveX control, initially created by MGI Software but later taken over by Roxio and then again by iseemedia.

This control reportedly has stack-based buffer overflows in its 'url()', 'toolbar()', and 'enableZoomPastMax()' methods. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage these issues to execute arbitrary code on the affected system subject to the user's privileges.


Unknown at this time.

Plugin Details

Severity: High

ID: 34472

File Name: lpviewer_activex_overflows.nasl

Version: $Revision: 1.12 $

Type: local

Agent: windows

Family: Windows

Published: 2008/10/22

Modified: 2017/09/05

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 8.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:U/RC:ND

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Exploitable With

Metasploit (iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow)

Reference Information

CVE: CVE-2008-4384

BID: 31604

OSVDB: 48946

CERT: 848873

Secunia: 32140

CWE: 119