NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

Bugtraq ID:	31374
Class:	Input Validation Error
CVE:	CVE-2008-4342
Remote:	Yes
Local:	No
Published:	Sep 23 2008 12:00AM
Updated:	Apr 16 2015 05:54PM
Credit:	Nine:Situations:Group::bruiser
Vulnerable:	Numedia Soft Inc. NMSDVDX DVD Burning SDK 1.008 Numedia Soft Inc. NMS DVD Burning SDK 1.013C Mystik Media Blaze Media Pro 8.02 SE Canneverbe CDBurnerXP 4.2.1 976
Not Vulnerable:

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

An ActiveX control in NMS DVD Burning SDK is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails to sanitize user-supplied input.

Successful exploits will compromise affected computers and will aid in further attacks.

Numedia Soft NMS DVD Burning SDK 1.013C is vulnerable. Applications that use this framework may also be vulnerable.

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into viewing a malicious web page.

The following example exploit code is available:

• /data/vulnerabilities/exploits/31374.html

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NMS DVD Burning SDK 'NMSDVDX.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

References:

• Blaze Media Pro Homepage (Mystik Media)
  
• CDBurnerXP Homepage (Canneverbe)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• NMS DVD Burning SDK Homepage (Numedia Soft)
  
• Blaze Media Pro 8.02 SE vulnerability ([email protected])