9.3
CVE-2007-0018
- EPSS 35.05%
- Veröffentlicht 24.01.2007 21:28:00
- Zuletzt bearbeitet 16.06.2026 22:34:42
- Erkennungen
LoginStack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Altdo ≫ Convert Mp3 Master Version 1.1
Altdo ≫ Mp3 Record And Edit Audio Master Version 1.2
Americanshareware ≫ Mp3 Wav Converter Version 3.1.8
Audio Edit Magic ≫ Audio Edit Magic Version 9.2.3_389
Cdburnerxp ≫ Cdburnerxp Pro Version 3.0.116
Cheetahburner ≫ Cheetah Cd Burner Version 3.56
Cheetahburner ≫ Cheetah Dvd Burner Version 1.79
Code-it Softare ≫ Abasic Editor Version 10.1
Code-it Softare ≫ Wave Mp3 Editor Version 10.1
Dandans Digital Media Products ≫ Easy Audio Editor Version 7.4
Dandans Digital Media Products ≫ Full Audio Converter Version 4.2
Dandans Digital Media Products ≫ Music Editing Master Version 5.2
Dandans Digital Media Products ≫ Visual Video Converter Version 4.4
Digital Borneo ≫ Audio Mixer And Editor Version 1.1.0
Easy Ringtone Maker ≫ Easy Ringtone Maker Version 2.0.5
Expstudio ≫ Audio Editor Version 4.0.2
Iaudiosoft.Com ≫ Absolute Mp3 Splitter Version 2.5.4
Iaudiosoft.Com ≫ Absolute Sound Recorder Version 3.4.5
Iaudiosoft.Com ≫ Absolute Video To Audio Converter Version 2.7.9
J Hepple Products ≫ Fx Audio Concat Version 1.2.0_beta
J Hepple Products ≫ Fx Audio Editor Version 4.7.11
J Hepple Products ≫ Fx Audio Tools Version 7.3.4
J Hepple Products ≫ Fx Magic Music Version 5.7.7
J Hepple Products ≫ Fx Movie Joiner Version 6.2.8
J Hepple Products ≫ Fx Movie Joiner And Splitter Version 6.2.8
J Hepple Products ≫ Fx Movie Splitter Version 6.4.7
J Hepple Products ≫ Fx New Sound Version 5.1.1
J Hepple Products ≫ Fx Video Converter Version 7.51.21
Joshua Mediasoft ≫ Audio Convertor Plus Version 2.2
Joshua Mediasoft ≫ Video Converter Plus Version 3.01
Magicvideosoftare ≫ Magic Audio Converter Version 8.2.6_build_719
Magicvideosoftare ≫ Magic Audio Recorder Version 5.3.7
Magicvideosoftare ≫ Magic Music Editor Version 5.2.2
Mcfunsoft ≫ Audio Editor Version 6.3.3_build_489
Mcfunsoft ≫ Audio Recorder For Free Version 6.1
Mcfunsoft ≫ Audio Studio Version 6.6.3_build_479
Mcfunsoft ≫ Ipod Audio Studio Version 6.2.4
Mcfunsoft ≫ Ipod Music Converter Version 5.1
Mcfunsoft ≫ Recording To Ipod Solution Version 5.1
Mediatox ≫ Aurora Media Workshop Version 3.3.25
Movavi ≫ Chiliburner Version 2.3
Movavi ≫ Convertmovie Version 4.4
Movavi ≫ Dvd To Ipod Version 1.0
Movavi ≫ Splitmovie Version 1.4
Movavi ≫ Videomessage Version 1.0
Mp3-soft ≫ Mp3 Normalizer Version 1.03
Mystik Media Products ≫ Audioedit Deluxe Version 4.10
Mystik Media Products ≫ Blaze Media Pro Version 7.0
Mystik Media Products ≫ Blaze Mediaconvert Version 3.4
Mystik Media Products ≫ Contextconvert Pro Version 3.1
Nctsoft Products ≫ Nctaudioeditor Version 2.7.1
Nctsoft Products ≫ Nctaudiostudio Version 2.7.1
Nctsoft Products ≫ Nctdialogicvoice Version 2.7.1
Nextlevel Systems ≫ Audio Editor Gold Version 9.2.5_build_424
Nextlevel Systems ≫ Audio Studio Gold Version 7.0.1.1_build_500
Quikscribe ≫ Quikscribe Player Version 5.022.05
Quikscribe ≫ Quikscribe Recorder Version 5.021.29
Recordnrip ≫ Recordnrip Version 1.0
Rmbsoft ≫ Audioconvert Version 3.1.0.125
Rmbsoft ≫ Soundedit Pro Version 2.1
Roemer Software ≫ Easy Hi-q Converter Version 1.7
Roemer Software ≫ Easy Hi-q Recorder Version 2.0
Roemer Software ≫ Free Hi-q Recorder Version 1.9
Sienzo ≫ Digital Music Mentor Version 2.6.0.3
Smart Media Systems ≫ Power Audio Editor Version 11.0.1
Softdiv Softare ≫ Dexster Version 3.0
Softdiv Softare ≫ Ivideomax Version 3.9
Softdiv Softare ≫ Mp3 To Wav Converter Version 3.0
Softdiv Softare ≫ Snosh Version 1.4
Softdiv Softare ≫ Videozilla Version 2.5
Virtual Cd ≫ Virtual Cd Version 6.0.0.7
Virtual Cd ≫ Virtual Cd Version 7.1.0.2
Virtual Cd ≫ Virtual Cd Version 8.0.0.6
Virtual Cd ≫ Virtual Cd File Server Version 7.1.0.3
Xrlly Software ≫ Arial Audio Converter Version 2.3.40
Xrlly Software ≫ Arial Sound Recorder Version 1.4.3
Xrlly Software ≫ Text To Speech Maker Version 1.3.8
Xwaver.Com ≫ Magic Audio Editor Pro Version 10.3.1_build_476
Xwaver.Com ≫ Magic Music Studio Pro Version 7.0.2.1_build_500
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 35.05% | 0.983 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
http://secunia.com/advisories/22922
http://secunia.com/advisories/23475
http://secunia.com/advisories/23485
http://secunia.com/advisories/23493
http://secunia.com/advisories/23495
http://secunia.com/advisories/23511
http://secunia.com/advisories/23516
http://secunia.com/advisories/23530
http://secunia.com/advisories/23532
http://secunia.com/advisories/23534
http://secunia.com/advisories/23535
http://secunia.com/advisories/23536
http://secunia.com/advisories/23541
http://secunia.com/advisories/23542
http://secunia.com/advisories/23543
http://secunia.com/advisories/23544
http://secunia.com/advisories/23546
http://secunia.com/advisories/23548
http://secunia.com/advisories/23550
http://secunia.com/advisories/23551
http://secunia.com/advisories/23552
http://secunia.com/advisories/23553
http://secunia.com/advisories/23554
http://secunia.com/advisories/23557
http://secunia.com/advisories/23558
http://secunia.com/advisories/23560
http://secunia.com/advisories/23561
http://secunia.com/advisories/23562
http://secunia.com/advisories/23565
http://secunia.com/advisories/23568
http://secunia.com/advisories/23745
http://secunia.com/advisories/23753
http://secunia.com/advisories/23795
http://secunia.com/advisories/25993
http://secunia.com/advisories/26046
http://secunia.com/advisories/26100
http://secunia.com/advisories/26101
http://secunia.com/advisories/28407
http://secunia.com/advisories/30406
http://secunia.com/advisories/30424
http://secunia.com/advisories/30439
http://secunia.com/advisories/30446
http://secunia.com/advisories/30447
http://secunia.com/advisories/30450
http://secunia.com/advisories/30459
http://secunia.com/blog/6/
http://secunia.com/secunia_research/2007-10/advisory/
http://secunia.com/secunia_research/2007-11/advisory/
http://secunia.com/secunia_research/2007-12/advisory/
http://secunia.com/secunia_research/2007-13/advisory/
http://secunia.com/secunia_research/2007-14/advisory/
http://secunia.com/secunia_research/2007-15/advisory/
http://secunia.com/secunia_research/2007-16/advisory/
http://secunia.com/secunia_research/2007-17/advisory/
http://secunia.com/secunia_research/2007-18/advisory/
http://secunia.com/secunia_research/2007-19/advisory/
http://secunia.com/secunia_research/2007-2/advisory/
http://secunia.com/secunia_research/2007-20/advisory/
http://secunia.com/secunia_research/2007-21/advisory/
http://secunia.com/secunia_research/2007-22/advisory/
http://secunia.com/secunia_research/2007-23/advisory/
http://secunia.com/secunia_research/2007-24/advisory/
http://secunia.com/secunia_research/2007-25/advisory/
http://secunia.com/secunia_research/2007-26/advisory/
http://secunia.com/secunia_research/2007-27/advisory/
http://secunia.com/secunia_research/2007-28/advisory/
http://secunia.com/secunia_research/2007-29/advisory/
http://secunia.com/secunia_research/2007-3/advisory/
http://secunia.com/secunia_research/2007-30/advisory/
http://secunia.com/secunia_research/2007-31/advisory/
http://secunia.com/secunia_research/2007-32/advisory/
http://secunia.com/secunia_research/2007-33/advisory/
http://secunia.com/secunia_research/2007-34/advisory/
http://secunia.com/secunia_research/2007-4/advisory/
http://secunia.com/secunia_research/2007-5/advisory/
http://secunia.com/secunia_research/2007-50/advisory/
http://secunia.com/secunia_research/2007-6/advisory/
http://secunia.com/secunia_research/2007-7/advisory/
http://secunia.com/secunia_research/2007-8/advisory/
http://secunia.com/secunia_research/2007-9/advisory/
http://www.kb.cert.org/vuls/id/292713
http://www.securityfocus.com/archive/1/457936/100/200/threaded
http://www.securityfocus.com/archive/1/457940/100/200/threaded
http://www.securityfocus.com/archive/1/457965/100/200/threaded
http://www.securityfocus.com/bid/22196
http://www.securityfocus.com/bid/23892
http://www.vupen.com/english/advisories/2007/0310
https://exchange.xforce.ibmcloud.com/vulnerabilities/31707