01 Record

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to

UnratedPUBLISHEDCNA: flexera

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 37.26% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 98.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2007-01-24 21:00Z19 YR AGO

Last updated

2024-08-07 12:03Z2 YR AGO

Reserved

2007-01-02

Assigning CNA

flexera

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferClass

Data version

5.1

Document digest

0e5fd189ee21cd3343effa75d7abaed6801b77f2d65c0d52ac77ad274dda0ebc

05 Affected products

VendorProductVersionsPlatforms

altdoconvert_mp3_masterNot specified—

altdomp3_record_and_edit_audio_masterNot specified—

americansharewaremp3_wav_converterNot specified—

audio_edit_magicaudio_edit_magicNot specified—

bearsharebearshareNot specified—

cdburnerxpcdburnerxp_proNot specified—

cheetahburnercheetah_cd_burnerNot specified—

cheetahburnercheetah_dvd_burnerNot specified—

code-it_softareabasic_editorNot specified—

code-it_softarewave_mp3_editorNot specified—

dandans_digital_media_productseasy_audio_editorNot specified—

dandans_digital_media_productsfull_audio_converterNot specified—

dandans_digital_media_productsmusic_editing_masterNot specified—

dandans_digital_media_productsvisual_video_converterNot specified—

digital_borneoaudio_mixer_and_editorNot specified—

easy_ringtone_makereasy_ringtone_makerNot specified—

expstudioaudio_editorNot specified—

iaudiosoft.comabsolute_mp3_splitterNot specified—

iaudiosoft.comabsolute_sound_recorderNot specified—

iaudiosoft.comabsolute_video_to_audio_converterNot specified—

imesh.comimeshNot specified—

j_hepple_productsfx_audio_concatNot specified—

j_hepple_productsfx_audio_editorNot specified—

j_hepple_productsfx_audio_toolsNot specified—

j_hepple_productsfx_magic_musicNot specified—

j_hepple_productsfx_movie_joinerNot specified—

j_hepple_productsfx_movie_joiner_and_splitterNot specified—

j_hepple_productsfx_movie_splitterNot specified—

j_hepple_productsfx_new_soundNot specified—

j_hepple_productsfx_video_converterNot specified—

joshua_mediasoftaudio_convertor_plusNot specified—

joshua_mediasoftvideo_converter_plusNot specified—

magicvideosoftaremagic_audio_converterNot specified—

magicvideosoftaremagic_audio_recorderNot specified—

magicvideosoftaremagic_music_editorNot specified—

mcfunsoftaudio_editorNot specified—

mcfunsoftaudio_recorder_for_freeNot specified—

mcfunsoftaudio_studioNot specified—

mcfunsoftipod_audio_studioNot specified—

mcfunsoftipod_music_converterNot specified—

mcfunsoftrecording_to_ipod_solutionNot specified—

mediatoxaurora_media_workshopNot specified—

movavichiliburnerNot specified—

movaviconvertmovieNot specified—

movavidvd_to_ipodNot specified—

movavisplitmovieNot specified—

movavisuiteNot specified—

movavivideomessageNot specified—

mp3-softmp3_normalizerNot specified—

mystik_media_productsaudioedit_deluxeNot specified—

mystik_media_productsblaze_media_proNot specified—

mystik_media_productsblaze_mediaconvertNot specified—

mystik_media_productscontextconvert_proNot specified—

nctsoft_productsnctaudioeditorNot specified—

nctsoft_productsnctaudiofile2Not specified—

nctsoft_productsnctaudiostudioNot specified—

nctsoft_productsnctdialogicvoiceNot specified—

nextlevel_systemsaudio_editor_goldNot specified—

nextlevel_systemsaudio_studio_goldNot specified—

quikscribequikscribe_playerNot specified—

21 further entries not shown. The complete list is in the raw JSON document.

06 References

secunia.com23546http://secunia.com/advisories/23546third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com23892http://www.securityfocus.com/bid/23892vdb-entryx_refsource_BID
secunia.comhttp://secunia.com/secunia_research/2007-7/advisory/x_refsource_MISC
secunia.com23535http://secunia.com/advisories/23535third-party-advisoryx_refsource_SECUNIA
exchange.xforce.ibmcloud.comnctaudiofile2-multiple-bo(31707)https://exchange.xforce.ibmcloud.com/vulnerabilities/31707vdb-entryx_refsource_XF
secunia.comhttp://secunia.com/secunia_research/2007-12/advisory/x_refsource_MISC
secunia.com23562http://secunia.com/advisories/23562third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-27/advisory/x_refsource_MISC
secunia.com23536http://secunia.com/advisories/23536third-party-advisoryx_refsource_SECUNIA
secunia.com30459http://secunia.com/advisories/30459third-party-advisoryx_refsource_SECUNIA
secunia.com30406http://secunia.com/advisories/30406third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-29/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-24/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-8/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-9/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-13/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-20/advisory/x_refsource_MISC
secunia.com23553http://secunia.com/advisories/23553third-party-advisoryx_refsource_SECUNIA
secunia.com23551http://secunia.com/advisories/23551third-party-advisoryx_refsource_SECUNIA
secunia.com23485http://secunia.com/advisories/23485third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-50/advisory/x_refsource_MISC
secunia.com23550http://secunia.com/advisories/23550third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-16/advisory/x_refsource_MISC
secunia.com30447http://secunia.com/advisories/30447third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-28/advisory/x_refsource_MISC
secunia.com23541http://secunia.com/advisories/23541third-party-advisoryx_refsource_SECUNIA
secunia.com26046http://secunia.com/advisories/26046third-party-advisoryx_refsource_SECUNIA
secunia.com23534http://secunia.com/advisories/23534third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-15/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-10/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-4/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-18/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-23/advisory/x_refsource_MISC
secunia.com23516http://secunia.com/advisories/23516third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-14/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-19/advisory/x_refsource_MISC
secunia.com25993http://secunia.com/advisories/25993third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-17/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-31/advisory/x_refsource_MISC
secunia.com23495http://secunia.com/advisories/23495third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-32/advisory/x_refsource_MISC
secunia.com23558http://secunia.com/advisories/23558third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-33/advisory/x_refsource_MISC
secunia.com23544http://secunia.com/advisories/23544third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20070124 Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX ControlBuffer Overflowhttp://www.securityfocus.com/archive/1/457936/100/200/threadedmailing-listx_refsource_BUGTRAQ
secunia.com23530http://secunia.com/advisories/23530third-party-advisoryx_refsource_SECUNIA
secunia.com23795http://secunia.com/advisories/23795third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-3/advisory/x_refsource_MISC
secunia.com23543http://secunia.com/advisories/23543third-party-advisoryx_refsource_SECUNIA
secunia.com23552http://secunia.com/advisories/23552third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/blog/6/x_refsource_MISC
secunia.com23475http://secunia.com/advisories/23475third-party-advisoryx_refsource_SECUNIA
secunia.com23560http://secunia.com/advisories/23560third-party-advisoryx_refsource_SECUNIA
secunia.com30439http://secunia.com/advisories/30439third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com20070124 Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2ActiveX Control Buffer Overflowhttp://www.securityfocus.com/archive/1/457940/100/200/threadedmailing-listx_refsource_BUGTRAQ
secunia.comhttp://secunia.com/secunia_research/2007-25/advisory/x_refsource_MISC
secunia.com26100http://secunia.com/advisories/26100third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-34/advisory/x_refsource_MISC
www.securityfocus.com20070124 Re: Secunia Research: NCTsoft Products NCTAudioFile2 ActiveXControl Buffer Overflowhttp://www.securityfocus.com/archive/1/457965/100/200/threadedmailing-listx_refsource_BUGTRAQ
secunia.comhttp://secunia.com/secunia_research/2007-21/advisory/x_refsource_MISC
secunia.com23548http://secunia.com/advisories/23548third-party-advisoryx_refsource_SECUNIA
secunia.com30446http://secunia.com/advisories/30446third-party-advisoryx_refsource_SECUNIA
secunia.com30424http://secunia.com/advisories/30424third-party-advisoryx_refsource_SECUNIA
secunia.com23561http://secunia.com/advisories/23561third-party-advisoryx_refsource_SECUNIA
secunia.com23557http://secunia.com/advisories/23557third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-6/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-30/advisory/x_refsource_MISC
secunia.com23745http://secunia.com/advisories/23745third-party-advisoryx_refsource_SECUNIA
secunia.com28407http://secunia.com/advisories/28407third-party-advisoryx_refsource_SECUNIA
secunia.com23493http://secunia.com/advisories/23493third-party-advisoryx_refsource_SECUNIA
secunia.com23511http://secunia.com/advisories/23511third-party-advisoryx_refsource_SECUNIA
www.vupen.comADV-2007-0310http://www.vupen.com/english/advisories/2007/0310vdb-entryx_refsource_VUPEN
secunia.com23565http://secunia.com/advisories/23565third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-5/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-11/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-22/advisory/x_refsource_MISC
secunia.comhttp://secunia.com/secunia_research/2007-26/advisory/x_refsource_MISC
secunia.com22922http://secunia.com/advisories/22922third-party-advisoryx_refsource_SECUNIA
secunia.com30450http://secunia.com/advisories/30450third-party-advisoryx_refsource_SECUNIA
secunia.comhttp://secunia.com/secunia_research/2007-2/advisory/x_refsource_MISC
secunia.com23568http://secunia.com/advisories/23568third-party-advisoryx_refsource_SECUNIA
secunia.com23532http://secunia.com/advisories/23532third-party-advisoryx_refsource_SECUNIA
secunia.com26101http://secunia.com/advisories/26101third-party-advisoryx_refsource_SECUNIA
secunia.com23753http://secunia.com/advisories/23753third-party-advisoryx_refsource_SECUNIA
secunia.com23542http://secunia.com/advisories/23542third-party-advisoryx_refsource_SECUNIA
www.kb.cert.orgVU#292713http://www.kb.cert.org/vuls/id/292713third-party-advisoryx_refsource_CERT-VN
secunia.com23554http://secunia.com/advisories/23554third-party-advisoryx_refsource_SECUNIA
www.securityfocus.com22196http://www.securityfocus.com/bid/22196vdb-entryx_refsource_BID