CVE-2007-3400 in NCTAudioStudio

Summary

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 06/26/2007
• Disclosure: 06/26/2007
• Moderation: VulDB entry created
• Entries: VDB-37461 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• Exploit: Download
• CVSS: 9.8
• EPSS: 0.10336
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3400
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3400
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3400/