NVD

Id
4170  
Name
CVE-2008-4342  
Description
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-30  
Modified Date
2011-08-31  
Seq
2008-4342  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26585 4170 CVE-2008-4342 http://retrogod.altervista.org/9sg_numedia_xpl.html  View
26586 4170 CVE-2008-4342 6491  View
26587 4170 CVE-2008-4342 20081027 Blaze Media Pro 8.02 SE vulnerability  View
26588 4170 CVE-2008-4342 31374  View
26589 4170 CVE-2008-4342 http://www.shinnai.net/xplits/TXT_TrWE9AJA8nQpuFsnxBcq  View
26590 4170 CVE-2008-4342 ADV-2008-2663  View
26591 4170 CVE-2008-4342 nmsdvdburning-nmsdvdx-file-overwrite(45330)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48169 JVNDB-2008-003479 CDBurnerXP などに使用される NMSDVDX.dll における任意のファイルを上書きおよび作成される脆弱性 CDBurnerXP、BurnAware、Blaze Media Pro Special Edition などの製品に使用される NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX コントロール (NMSDVDX.dll) には、任意のファイルを上書きおよび作成される脆弱性が存在します。 CVE-2008-4342 34455 CVE-2008-4342 4170 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003479.html 2008-09-30 2012-06-26 View