CVE-2007-3400 The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile metho...
HighCVSS 9.3
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nctsoft nctaudioeditor | = _nil_ | No fix listed |
| nctsoft nctaudiostudio | = 2.7 | No fix listed |
References
- 37674 vdb-entry
- 25825 third-party-advisory vendor-advisory
- 24613 exploit vdb-entry
- ADV-2007-2351 vdb-entry vendor-advisory
- nctaudioeditor-createfile-file-overwrite(35018) vdb-entry
- 4101 exploit