CVE-2008-4342

CVE-2008-4342 describes a critical vulnerability in the NuMedia Soft NMS DVD Burning SDK ActiveX control (NMSDVDX.dll) version 1.013C and earlier, affecting products like CDBurnerXP and BurnAware. This flaw allows remote attackers to overwrite and create arbitrary files through the EnableLog and LogMessage methods, potentially leading to remote code execution by accessing hcp:// URLs. With a CVSS score of 9.3 (Critical), this vulnerability has a network attack vector and medium attack complexity, enabling complete compromise of confidentiality, integrity, and availability. Its high FAUCET Risk Score of 97/100 underscores the severe potential impact. While not listed on the KEV catalog or Hot List, and with no active exploitation reported, exploit code (EDB-6491) is publicly available, demonstrating its feasibility. Despite its age, the lack of community discussion or media coverage suggests it may be overlooked, yet the existence of public exploits indicates a persistent risk.