| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 7.0 | |
| nctaudiostudio | = 2.7 | |
| nctwavchunkseditor2.dll | = 2.6.1.148 |
A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free