Design/Logic Flaw

2007-06-2617:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.106 Low

EPSS

Percentile

95.1%

JSON

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

CPENameOperatorVersion
nctaudiostudioeq2.7

CPE	Name	Operator	Version
	nctaudiostudio	eq	2.7

References

osvdb.org/37674

secunia.com/advisories/25825

www.securityfocus.com/bid/24613

www.vupen.com/english/advisories/2007/2351

exchange.xforce.ibmcloud.com/vulnerabilities/35018

www.exploit-db.com/exploits/4101