Lucene search

[email protected]CVE-2007-0018

HistoryJan 24, 2007 - 9:28 p.m.

CVE-2007-0018

2007-01-2421:28:00

CWE-119

[email protected]

web.nvd.nist.gov

nctaudiofile2

activex

buffer overflow

remote code execution

security vulnerability

cve-2007-0018

nctsoft

magic audio recorder

aurora media workshop

db audio mixer

expstudio audio editor

imesh

quikscribe

cdburnerxp

movavi videomessage

softdiv software

sienzo digital music mentor

roemer software

dandans digital media

xrlly software

absolute sound recorder

recordnrip

bearshare

oracle siebel simbuilder

crm 7.x

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.952 High

EPSS

Percentile

99.3%

JSON

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.

CPENameOperatorVersion
mcfunsoft:audio_studiomcfunsoft audio studioeq6.6.3_build_479
j_hepple_products:fx_movie_joiner_and_splitterj hepple products fx movie joiner and splittereq6.2.8
movavi:suitemovavi suiteeq3.5
movavi:dvd_to_ipodmovavi dvd to ipodeq1.0
cheetahburner:cheetah_dvd_burnercheetahburner cheetah dvd burnereq1.79
mcfunsoft:ipod_music_convertermcfunsoft ipod music convertereq5.1
mystik_media_products:blaze_media_promystik media products blaze media proeq7.0
xrlly_software:arial_audio_converterxrlly software arial audio convertereq2.3.40
code-it_softare:wave_mp3_editorcode-it softare wave mp3 editoreq10.1
softdiv_softare:videozillasoftdiv softare videozillaeq2.5

CPE	Name	Operator	Version
mcfunsoft:audio_studio	mcfunsoft audio studio	eq	6.6.3_build_479
j_hepple_products:fx_movie_joiner_and_splitter	j hepple products fx movie joiner and splitter	eq	6.2.8
movavi:suite	movavi suite	eq	3.5
movavi:dvd_to_ipod	movavi dvd to ipod	eq	1.0
cheetahburner:cheetah_dvd_burner	cheetahburner cheetah dvd burner	eq	1.79
mcfunsoft:ipod_music_converter	mcfunsoft ipod music converter	eq	5.1
mystik_media_products:blaze_media_pro	mystik media products blaze media pro	eq	7.0
xrlly_software:arial_audio_converter	xrlly software arial audio converter	eq	2.3.40
code-it_softare:wave_mp3_editor	code-it softare wave mp3 editor	eq	10.1
softdiv_softare:videozilla	softdiv softare videozilla	eq	2.5

Rows per page:

1-10 of 831

References

secunia.com/advisories/22922

secunia.com/advisories/23475

secunia.com/advisories/23485

secunia.com/advisories/23493

secunia.com/advisories/23495

secunia.com/advisories/23511

secunia.com/advisories/23516

secunia.com/advisories/23530

secunia.com/advisories/23532

secunia.com/advisories/23534

secunia.com/advisories/23535

secunia.com/advisories/23536

secunia.com/advisories/23541

secunia.com/advisories/23542

secunia.com/advisories/23543

secunia.com/advisories/23544

secunia.com/advisories/23546

secunia.com/advisories/23548

secunia.com/advisories/23550

secunia.com/advisories/23551

secunia.com/advisories/23552

secunia.com/advisories/23553

secunia.com/advisories/23554

secunia.com/advisories/23557

secunia.com/advisories/23558

secunia.com/advisories/23560

secunia.com/advisories/23561

secunia.com/advisories/23562

secunia.com/advisories/23565

secunia.com/advisories/23568

secunia.com/advisories/23745

secunia.com/advisories/23753

secunia.com/advisories/23795

secunia.com/advisories/25993

secunia.com/advisories/26046

secunia.com/advisories/26100

secunia.com/advisories/26101

secunia.com/advisories/28407

secunia.com/advisories/30406

secunia.com/advisories/30424

secunia.com/advisories/30439

secunia.com/advisories/30446

secunia.com/advisories/30447

secunia.com/advisories/30450

secunia.com/advisories/30459

secunia.com/blog/6/

secunia.com/secunia_research/2007-10/advisory/

secunia.com/secunia_research/2007-11/advisory/

secunia.com/secunia_research/2007-12/advisory/

secunia.com/secunia_research/2007-13/advisory/

secunia.com/secunia_research/2007-14/advisory/

secunia.com/secunia_research/2007-15/advisory/

secunia.com/secunia_research/2007-16/advisory/

secunia.com/secunia_research/2007-17/advisory/

secunia.com/secunia_research/2007-18/advisory/

secunia.com/secunia_research/2007-19/advisory/

secunia.com/secunia_research/2007-2/advisory/

secunia.com/secunia_research/2007-20/advisory/

secunia.com/secunia_research/2007-21/advisory/

secunia.com/secunia_research/2007-22/advisory/

secunia.com/secunia_research/2007-23/advisory/

secunia.com/secunia_research/2007-24/advisory/

secunia.com/secunia_research/2007-25/advisory/

secunia.com/secunia_research/2007-26/advisory/

secunia.com/secunia_research/2007-27/advisory/

secunia.com/secunia_research/2007-28/advisory/

secunia.com/secunia_research/2007-29/advisory/

secunia.com/secunia_research/2007-3/advisory/

secunia.com/secunia_research/2007-30/advisory/

secunia.com/secunia_research/2007-31/advisory/

secunia.com/secunia_research/2007-32/advisory/

secunia.com/secunia_research/2007-33/advisory/

secunia.com/secunia_research/2007-34/advisory/

secunia.com/secunia_research/2007-4/advisory/

secunia.com/secunia_research/2007-5/advisory/

secunia.com/secunia_research/2007-50/advisory/

secunia.com/secunia_research/2007-6/advisory/

secunia.com/secunia_research/2007-7/advisory/

secunia.com/secunia_research/2007-8/advisory/

secunia.com/secunia_research/2007-9/advisory/

www.kb.cert.org/vuls/id/292713

www.securityfocus.com/archive/1/457936/100/200/threaded

www.securityfocus.com/archive/1/457940/100/200/threaded

www.securityfocus.com/archive/1/457965/100/200/threaded

www.securityfocus.com/bid/22196

www.securityfocus.com/bid/23892

www.vupen.com/english/advisories/2007/0310

exchange.xforce.ibmcloud.com/vulnerabilities/31707

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.952 High

EPSS

Percentile

99.3%

JSON

Related for CVE-2007-0018

kaspersky1 checkpoint_advisories1 packetstorm2 cert1 securityvulns5 prion1