CVE-2007-0018 Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to t...
HighCVSS 9.3
EPSS 37.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| altdo convert mp3 master | = 1.1 | No fix listed |
| altdo mp3 record and edit audio master | = 1.2 | No fix listed |
| americanshareware mp3 wav converter | = 3.1.8 | No fix listed |
| audio edit magic | = 9.2.3_389 | No fix listed |
| bearshare | = 6.0.2.26789 | No fix listed |
| cdburnerxp pro | = 3.0.116 | No fix listed |
| cheetahburner cheetah cd burner | = 3.56 | No fix listed |
| cheetahburner cheetah dvd burner | = 1.79 | No fix listed |
| code-it softare abasic editor | = 10.1 | No fix listed |
| code-it softare wave mp3 editor | = 10.1 | No fix listed |
| dandans digital media products easy audio editor | = 7.4 | No fix listed |
| dandans digital media products full audio converter | = 4.2 | No fix listed |
| dandans digital media products music editing master | = 5.2 | No fix listed |
| dandans digital media products visual video converter | = 4.4 | No fix listed |
| digital borneo audio mixer and editor | = 1.1.0 | No fix listed |
| easy ringtone maker | = 2.0.5 | No fix listed |
| expstudio audio editor | = 4.0.2 | No fix listed |
| iaudiosoft.com absolute mp3 splitter | = 2.5.4 | No fix listed |
| iaudiosoft.com absolute sound recorder | = 3.4.5 | No fix listed |
| iaudiosoft.com absolute video to audio converter | = 2.7.9 | No fix listed |
| imesh.com imesh | = 7.0.2.26789 | No fix listed |
| j hepple products fx audio concat | = 1.2.0_beta | No fix listed |
| j hepple products fx audio editor | = 4.7.11 | No fix listed |
| j hepple products fx audio tools | = 7.3.4 | No fix listed |
| j hepple products fx magic music | = 5.7.7 | No fix listed |
Show 58 more
| Product | Affected versions | Fixed in |
|---|---|---|
| j hepple products fx movie joiner | = 6.2.8 | No fix listed |
| j hepple products fx movie joiner and splitter | = 6.2.8 | No fix listed |
| j hepple products fx movie splitter | = 6.4.7 | No fix listed |
| j hepple products fx new sound | = 5.1.1 | No fix listed |
| j hepple products fx video converter | = 7.51.21 | No fix listed |
| joshua mediasoft audio convertor plus | = 2.2 | No fix listed |
| joshua mediasoft video converter plus | = 3.01 | No fix listed |
| magicvideosoftare magic audio converter | = 8.2.6_build_719 | No fix listed |
| magicvideosoftare magic audio recorder | = 5.3.7 | No fix listed |
| magicvideosoftare magic music editor | = 5.2.2 | No fix listed |
| mcfunsoft audio editor | = 6.3.3_build_489 | No fix listed |
| mcfunsoft audio recorder for free | = 6.1 | No fix listed |
| mcfunsoft audio studio | = 6.6.3_build_479 | No fix listed |
| mcfunsoft ipod audio studio | = 6.2.4 | No fix listed |
| mcfunsoft ipod music converter | = 5.1 | No fix listed |
| mcfunsoft recording to ipod solution | = 5.1 | No fix listed |
| mediatox aurora media workshop | = 3.3.25 | No fix listed |
| movavi chiliburner | = 2.3 | No fix listed |
| movavi convertmovie | = 4.4 | No fix listed |
| movavi dvd to ipod | = 1.0 | No fix listed |
| movavi splitmovie | = 1.4 | No fix listed |
| movavi suite | = 3.5 | No fix listed |
| movavi videomessage | = 1.0 | No fix listed |
| mp3-soft mp3 normalizer | = 1.03 | No fix listed |
| mystik media products audioedit deluxe | = 4.10 | No fix listed |
| mystik media products blaze media pro | = 7.0 | No fix listed |
| mystik media products blaze mediaconvert | = 3.4 | No fix listed |
| mystik media products contextconvert pro | = 3.1 | No fix listed |
| nctsoft products nctaudioeditor | = 2.7.1 | No fix listed |
| nctsoft products nctaudiofile2 | All versions | No fix listed |
| nctsoft products nctaudiostudio | = 2.7.1 | No fix listed |
| nctsoft products nctdialogicvoice | = 2.7.1 | No fix listed |
| nextlevel systems audio editor gold | = 9.2.5_build_424 | No fix listed |
| nextlevel systems audio studio gold | = 7.0.1.1_build_500 | No fix listed |
| quikscribe player | = 5.022.05 | No fix listed |
| quikscribe recorder | = 5.021.29 | No fix listed |
| recordnrip | = 1.0 | No fix listed |
| rmbsoft audioconvert | = 3.1.0.125 | No fix listed |
| rmbsoft soundedit pro | = 2.1 | No fix listed |
| roemer software easy hi-q converter | = 1.7 | No fix listed |
| roemer software easy hi-q recorder | = 2.0 | No fix listed |
| roemer software free hi-q recorder | = 1.9 | No fix listed |
| sienzo digital music mentor | = 2.6.0.3 | No fix listed |
| smart media systems power audio editor | = 11.0.1 | No fix listed |
| softdiv softare dexster | = 3.0 | No fix listed |
| softdiv softare ivideomax | = 3.9 | No fix listed |
| softdiv softare mp3 to wav converter | = 3.0 | No fix listed |
| softdiv softare snosh | = 1.4 | No fix listed |
| softdiv softare videozilla | = 2.5 | No fix listed |
| virtual cd | = 6.0.0.7 | No fix listed |
| virtual cd | = 7.1.0.2 | No fix listed |
| virtual cd | = 8.0.0.6 | No fix listed |
| virtual cd file server | = 7.1.0.3 | No fix listed |
| xrlly software arial audio converter | = 2.3.40 | No fix listed |
| xrlly software arial sound recorder | = 1.4.3 | No fix listed |
| xrlly software text to speech maker | = 1.3.8 | No fix listed |
| xwaver.com magic audio editor pro | = 10.3.1_build_476 | No fix listed |
| xwaver.com magic music studio pro | = 7.0.2.1_build_500 | No fix listed |
References
- 22922 third-party-advisory
- 23475 third-party-advisory vendor-advisory
- 23485 third-party-advisory vendor-advisory
- 23493 third-party-advisory vendor-advisory
- 23495 third-party-advisory vendor-advisory
- 23511 third-party-advisory vendor-advisory
- 23516 third-party-advisory vendor-advisory
- 23530 third-party-advisory vendor-advisory
- 23532 third-party-advisory vendor-advisory
- 23534 third-party-advisory vendor-advisory
- 23535 third-party-advisory
- 23536 third-party-advisory
- 23541 third-party-advisory
- 23542 third-party-advisory
- 23543 third-party-advisory vendor-advisory
- 23544 third-party-advisory
- 23546 third-party-advisory
- 23548 third-party-advisory
- 23550 third-party-advisory
- 23551 third-party-advisory vendor-advisory
- 23552 third-party-advisory vendor-advisory
- 23553 third-party-advisory vendor-advisory
- 23554 third-party-advisory
- 23557 third-party-advisory vendor-advisory
- 23558 third-party-advisory
- 23560 third-party-advisory
- 23561 third-party-advisory
- 23562 third-party-advisory
- 23565 third-party-advisory
- 23568 third-party-advisory vendor-advisory
- 23745 third-party-advisory
- 23753 third-party-advisory
- 23795 third-party-advisory
- 25993 third-party-advisory
- 26046 third-party-advisory
- 26100 third-party-advisory
- 26101 third-party-advisory
- 28407 third-party-advisory
- 30406 third-party-advisory
- 30424 third-party-advisory
- 30439 third-party-advisory
- 30446 third-party-advisory
- 30447 third-party-advisory
- 30450 third-party-advisory
- 30459 third-party-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- VU#292713 third-party-advisory us-government-resource
- 20070124 Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX ControlBuffer Overflow mailing-list
- 20070124 Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2ActiveX Control Buffer Overflow mailing-list
- 20070124 Re: Secunia Research: NCTsoft Products NCTAudioFile2 ActiveXControl Buffer Overflow mailing-list
- 22196 vdb-entry
- 23892 vdb-entry
- ADV-2007-0310 vdb-entry
- nctaudiofile2-multiple-bo(31707) vdb-entry