CVE-2007-3400

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

Published: Jun 26, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-3400
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
nctsoft / nctaudioeditor	_nil_	_nil_.x
nctsoft / nctaudiostudio	2.7	2.7.x

http://osvdb.org/37674
http://secunia.com/advisories/25825
http://www.securityfocus.com/bid/24613
http://www.vupen.com/english/advisories/2007/2351
https://exchange.xforce.ibmcloud.com/vulnerabilities/35018
https://www.exploit-db.com/exploits/4101

Vulnerability Database

CVE-2007-3400