$ cve CVE-2008-4342 JSON

CVE-2008-4342 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 17.2% (pctl 97)

Patch early

A public exploit exists.

Description

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control (NMSDVDX.dll) 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via calls to the EnableLog and LogMessage methods. NOTE: this issue might only be exploitable in limited environments or non-default browser settings. NOTE: some of these details are obtained from third party information. NOTE: this can be leveraged for remote code execution by accessing files using hcp:// URLs.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	17.2% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2008-09-30
Last modified	2026-06-16

Affected (3)

Vendor	Product
burnaware technologies	burnaware
impressum	cdburnerxp
numedia soft	numedia dvd burning sdk

Public exploits

Source	Title	Date
exploit-db	NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution	2008-09-19

References

→ the Explorer · watch your stack · NVD