NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/31936 | third-party-advisory x_refsource_SECUNIA |
| http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq | x_refsource_MISC |
| https://www.exploit-db.com/exploits/6491 | exploit x_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2008/2663 | vdb-entry x_refsource_VUPEN |
| http://www.securityfocus.com/archive/1/497831/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45330 | vdb-entry x_refsource_XF |
| http://secunia.com/advisories/32455 | third-party-advisory x_refsource_SECUNIA |
| http://secunia.com/advisories/31949 | third-party-advisory x_refsource_SECUNIA |
| http://www.securityfocus.com/bid/31374 | vdb-entry x_refsource_BID |
| http://retrogod.altervista.org/9sg_numedia_xpl.html | x_refsource_MISC |
| http://secunia.com/advisories/31950 | third-party-advisory x_refsource_SECUNIA |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/31936 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq | x_refsource_MISC x_transferred |
| https://www.exploit-db.com/exploits/6491 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.vupen.com/english/advisories/2008/2663 | vdb-entry x_refsource_VUPEN x_transferred |
| http://www.securityfocus.com/archive/1/497831/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45330 | vdb-entry x_refsource_XF x_transferred |
| http://secunia.com/advisories/32455 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://secunia.com/advisories/31949 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.securityfocus.com/bid/31374 | vdb-entry x_refsource_BID x_transferred |
| http://retrogod.altervista.org/9sg_numedia_xpl.html | x_refsource_MISC x_transferred |
| http://secunia.com/advisories/31950 | third-party-advisory x_refsource_SECUNIA x_transferred |