CVEvulnerability
CVE-2008-4342
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
Affected configurations
• burnaware technologies burnaware 2.1.3
• impressum cdburnerxp 4.2.1.976
• numedia soft numedia dvd burning sdk 1.008
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://retrogod.altervista.org/9sg_numedia_xpl.html Exploit
- http://secunia.com/advisories/31936 Vendor Advisory
- http://secunia.com/advisories/31949 Vendor Advisory
- http://secunia.com/advisories/31950 Vendor Advisory
- http://secunia.com/advisories/32455 Vendor Advisory
- http://www.securityfocus.com/archive/1/497831/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31374 Exploit
- http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq Exploit, URL Repurposed
- http://www.vupen.com/english/advisories/2008/2663 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45330 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6491 www.exploit-db.com
- http://retrogod.altervista.org/9sg_numedia_xpl.html Exploit
- http://secunia.com/advisories/31936 Vendor Advisory
- http://secunia.com/advisories/31949 Vendor Advisory
- http://secunia.com/advisories/31950 Vendor Advisory
- http://secunia.com/advisories/32455 Vendor Advisory
- http://www.securityfocus.com/archive/1/497831/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31374 Exploit
- http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq Exploit, URL Repurposed
- http://www.vupen.com/english/advisories/2008/2663 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45330 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6491 www.exploit-db.com