StudioLine Photo Basic NMSDVDXU.dll ActiveX EnableLog() Arbitrary File Overwrite

Medium Nessus Plugin ID 60022


The remote host has software installed that is affected by an arbitrary file overwrite vulnerability.


The remote host has a version of StudioLine Photo Basic less than or equal to installed. Such versions are affected by an arbitrary file overwrite vulnerability in the EnableLog() method on the NMSDVDXU.dll ActiveX control.

By tricking a victim into opening a specially crafted web page, an attacker could overwrite arbitrary files on the remote host subject to the user's privileges.


Upgrade to a version of StudioLine Photo Basic greater than or remove / disable the vulnerable ActiveX control.

See Also

Plugin Details

Severity: Medium

ID: 60022

File Name: studioline_photobasic_activex_enablelog.nasl

Version: $Revision: 1.4 $

Type: local

Agent: windows

Family: Windows

Published: 2012/07/18

Modified: 2014/04/17

Dependencies: 60021, 13855

Risk Information

Risk Factor: Medium


Base Score: 4.3

Temporal Score: 3.6

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Temporal Vector: CVSS2#E:F/RL:OF/RC:ND

Vulnerability Information

CPE: x-cpe:/a:studioline:photobasic

Required KB Items: SMB/StudioLine_PhotoBasic/Installed, SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2011/07/27

Vulnerability Publication Date: 2011/08/15

Reference Information

BID: 49192

OSVDB: 74611