ByteOS Network

NVD Vulnerability Details :

CVE-2008-4342

Modified

Source-cve@mitre.org

Published At-30 Sep, 2008 | 17:22

Updated At-14 Feb, 2024 | 01:17

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://retrogod.altervista.org/9sg_numedia_xpl.html	cve@mitre.org	Exploit
http://secunia.com/advisories/31936	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/31949	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/31950	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32455	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/archive/1/497831/100/0/threaded	cve@mitre.org	N/A
http://www.securityfocus.com/bid/31374	cve@mitre.org	Exploit
http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq	cve@mitre.org	Exploit URL Repurposed
http://www.vupen.com/english/advisories/2008/2663	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45330	cve@mitre.org	N/A
https://www.exploit-db.com/exploits/6491	cve@mitre.org	N/A