CVE-2008-4342

2008-09-3017:22:09

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.458

Percentile

97.4%

JSON

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.

Affected configurations

Nvd

Node

burnaware_technologiesburnawareMatch2.1.3unknownfree

burnaware_technologiesburnawareMatch2.1.3unknownhome

burnaware_technologiesburnawareMatch2.1.3unknownprofessional

impressumcdburnerxpMatch4.2.1.976

numedia_softnumedia_dvd_burning_sdkMatch1.008

VendorProductVersionCPE
burnaware_technologiesburnaware2.1.3cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:free:*:*:*:*:*
burnaware_technologiesburnaware2.1.3cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:home:*:*:*:*:*
burnaware_technologiesburnaware2.1.3cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:professional:*:*:*:*:*
impressumcdburnerxp4.2.1.976cpe:2.3:a:impressum:cdburnerxp:4.2.1.976:*:*:*:*:*:*:*
numedia_softnumedia_dvd_burning_sdk1.008cpe:2.3:a:numedia_soft:numedia_dvd_burning_sdk:1.008:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
burnaware_technologies	burnaware	2.1.3	cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:free:::::*
burnaware_technologies	burnaware	2.1.3	cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:home:::::*
burnaware_technologies	burnaware	2.1.3	cpe:2.3:a:burnaware_technologies:burnaware:2.1.3:unknown:professional:::::*
impressum	cdburnerxp	4.2.1.976	cpe:2.3:a:impressum:cdburnerxp:4.2.1.976:::::::*
numedia_soft	numedia_dvd_burning_sdk	1.008	cpe:2.3:a:numedia_soft:numedia_dvd_burning_sdk:1.008:::::::*