imPC@ndo IT

Tracker / CVE-2007-3493

CVE-2007-3493

High 7.5

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Affected products and versions

microsoft internet_explorer
nctsoft_products nctaudiostudio
nctsoft_products nctwavchunkseditor2.dll

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References