The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.
| Software | From | Fixed in |
|---|---|---|
| nctsoft / nctaudioeditor | _nil_ | _nil_.x |
| nctsoft / nctaudiostudio | 2.7 | 2.7.x |