CVE-2007-3400

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2007-06-26

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Nctaudioeditor (Nctsoft)
• Nctaudiostudio (Nctsoft)

References

• http://osvdb.org/37674
• http://secunia.com/advisories/25825
• http://www.securityfocus.com/bid/24613
• http://www.vupen.com/english/advisories/2007/2351
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35018
• https://www.exploit-db.com/exploits/4101