StudioLine Photo Basic 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

Bugtraq ID:	49192
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 17 2011 12:00AM
Updated:	Aug 17 2011 12:00AM
Credit:	High-Tech Bridge SA
Vulnerable:	StudioLine Photo Basic 3.70.34.0
Not Vulnerable:

StudioLine Photo Basic 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

StudioLine Photo Basic ActiveX is prone to an arbitrary-file-overwrite vulnerability.

Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).

StudioLine Photo Basic 3.70.34.0 is vulnerable; other versions may also be affected.

StudioLine Photo Basic 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/49192.html

StudioLine Photo Basic 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

Solution:
Reports indicate that this issue has been fixed. Please see the references for details.

StudioLine Photo Basic 'NMSDVDXU.dll' ActiveX Control Arbitrary File Overwrite Vulnerability

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Photo Basic 3 Homepage (StudioLine)
  
• StudioLine Photo Basic 3 ActiveX control Insecure Method (High-Tech Bridge SA)
  
• StudioLine Photo Basic 3 ActiveX control Insecure Method ([email protected])