NetSight
IP …
high7.5Public exploit code

CVE-2007-3493

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Affected products

VendorProductAffected versions
MicrosoftInternet Explorer
Version 7.0
Nctsoft ProductsNctaudiostudio
Version 2.7
Nctsoft ProductsNctwavchunkseditor2.Dll
Version 2.6.1.148

References