CVE-2007-3400

CRÍTICO 9.3CVE-2007-3400 · Published 26/06/2007 · updated 16/06/2026

En resumen

CVE-2007-3400 es una vulnerabilidad CRÍTICO (CVSS 9.3) que afecta a nctaudioeditor (nctsoft), nctaudiostudio (nctsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.6%, mayor que el 89.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
nctaudioeditor nctsoft	`= _nil_`	No fix yet
nctaudiostudio nctsoft	`= 2.7`	No fix yet

Description

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

References

osvdb.org/37674
secunia.com/advisories/25825 · Vendor Advisory
securityfocus.com/bid/24613 · Exploit
vupen.com/english/advisories/2007/2351 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/35018
exploit-db.com/exploits/4101

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free