peter bassill · operator
$ cve CVE-2007-0018 JSON

CVE-2007-0018 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 36.5% (pctl 98)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS36.47% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2007-01-24
Last modified2026-06-16

Affected (40)

VendorProduct
altdoconvert mp3 master
altdomp3 record and edit audio master
americansharewaremp3 wav converter
audio edit magicaudio edit magic
bearsharebearshare
cdburnerxpcdburnerxp pro
cheetahburnercheetah cd burner
cheetahburnercheetah dvd burner
code-it softareabasic editor
code-it softarewave mp3 editor
dandans digital media productseasy audio editor
dandans digital media productsfull audio converter
dandans digital media productsmusic editing master
dandans digital media productsvisual video converter
digital borneoaudio mixer and editor
easy ringtone makereasy ringtone maker
expstudioaudio editor
iaudiosoft.comabsolute mp3 splitter
iaudiosoft.comabsolute sound recorder
iaudiosoft.comabsolute video to audio converter
imesh.comimesh
j hepple productsfx audio concat
j hepple productsfx audio editor
j hepple productsfx audio tools
j hepple productsfx magic music
j hepple productsfx movie joiner
j hepple productsfx movie joiner and splitter
j hepple productsfx movie splitter
j hepple productsfx new sound
j hepple productsfx video converter
joshua mediasoftaudio convertor plus
joshua mediasoftvideo converter plus
magicvideosoftaremagic audio converter
magicvideosoftaremagic audio recorder
magicvideosoftaremagic music editor
mcfunsoftaudio editor
mcfunsoftaudio recorder for free
mcfunsoftaudio studio
mcfunsoftipod audio studio
mcfunsoftipod music converter

Public exploits

SourceTitleDate
exploit-dbNCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit)2010-07-03
exploit-dbMicrosoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow (2)2007-04-27
exploit-dbMicrosoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow2007-04-13

References

→ the Explorer  ·  watch your stack  ·  NVD