CVE-2008-4342
BurnAware - Arbitrary File Write via NMSDVDX.DVDEngineX ActiveX Control
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4342. PoCs published by Nine:Situations:Group.
AI-analyzed exploit summary This exploit leverages the NuMedia Soft NMS DVD Burning SDK ActiveX control to overwrite a file in the Help and Support Center directory, then executes arbitrary VBScript via the hcp:// protocol. The PoC launches calc.exe as a demonstration of remote code execution.
Description
NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.
Exploits (1)
This exploit leverages the NuMedia Soft NMS DVD Burning SDK ActiveX control to overwrite a file in the Help and Support Center directory, then executes arbitrary VBScript via the hcp:// protocol. The PoC launches calc.exe as a demonstration of remote code execution.