critical9.3Public exploit code
CVE-2007-3400
The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NCTAudioEditor2 ActiveX DLL 'NCTWMAFile2.dll 2.6.2.157' - File Write2007-06-25 · remote · windows · Verified
Impact
The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nctsoft | Nctaudioeditor | Version _nil_ |
| Nctsoft | Nctaudiostudio | Version 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/37674
- http://secunia.com/advisories/25825
- http://www.securityfocus.com/bid/24613
- http://www.vupen.com/english/advisories/2007/2351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35018
- https://www.exploit-db.com/exploits/4101
- http://osvdb.org/37674
- http://secunia.com/advisories/25825
- http://www.securityfocus.com/bid/24613
- http://www.vupen.com/english/advisories/2007/2351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35018
- https://www.exploit-db.com/exploits/4101