CVE-2007-3400

Published: Jun 26, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

Affected (2)

Products: Nctsoft: Nctaudioeditor, Nctaudiostudio

Nctsoft

2 products

Nctaudioeditor

Nctaudiostudio

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Nctsoft Nctaudioeditor	Version _nil_
Nctsoft Nctaudiostudio	Version 2.7

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://osvdb.org/37674

Source: cve@mitre.org

http://secunia.com/advisories/25825

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/24613

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/2351

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/35018

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4101

Source: cve@mitre.org

http://osvdb.org/37674