Lucene search

[email protected]CVE-2007-0018

HistoryJan 24, 2007 - 9:28 p.m.

CVE-2007-0018

2007-01-2421:28:00

CWE-119

[email protected]

web.nvd.nist.gov

nctaudiofile2

activex

buffer overflow

remote code execution

security vulnerability

cve-2007-0018

nctsoft

magic audio recorder

aurora media workshop

db audio mixer

expstudio audio editor

imesh

quikscribe

cdburnerxp

movavi videomessage

softdiv software

sienzo digital music mentor

roemer software

dandans digital media

xrlly software

absolute sound recorder

recordnrip

bearshare

oracle siebel simbuilder

crm 7.x

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.952 High

EPSS

Percentile

99.4%

JSON

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.

Affected configurations

NVD

Node

altdoconvert_mp3_masterMatch1.1

altdomp3_record_and_edit_audio_masterMatch1.2

americansharewaremp3_wav_converterMatch3.1.8

audio_edit_magicaudio_edit_magicMatch9.2.3_389

bearsharebearshareMatch6.0.2.26789

cdburnerxpcdburnerxp_proMatch3.0.116

cheetahburnercheetah_cd_burnerMatch3.56

cheetahburnercheetah_dvd_burnerMatch1.79

code-it_softareabasic_editorMatch10.1

code-it_softarewave_mp3_editorMatch10.1

dandans_digital_media_productseasy_audio_editorMatch7.4

dandans_digital_media_productsfull_audio_converterMatch4.2

dandans_digital_media_productsmusic_editing_masterMatch5.2

dandans_digital_media_productsvisual_video_converterMatch4.4

digital_borneoaudio_mixer_and_editorMatch1.1.0

easy_ringtone_makereasy_ringtone_makerMatch2.0.5

expstudioaudio_editorMatch4.0.2

iaudiosoft.comabsolute_mp3_splitterMatch2.5.4

iaudiosoft.comabsolute_sound_recorderMatch3.4.5

iaudiosoft.comabsolute_video_to_audio_converterMatch2.7.9

imesh.comimeshMatch7.0.2.26789

j_hepple_productsfx_audio_concatMatch1.2.0_beta

j_hepple_productsfx_audio_editorMatch4.7.11

j_hepple_productsfx_audio_toolsMatch7.3.4

j_hepple_productsfx_magic_musicMatch5.7.7

j_hepple_productsfx_movie_joinerMatch6.2.8

j_hepple_productsfx_movie_joiner_and_splitterMatch6.2.8

j_hepple_productsfx_movie_splitterMatch6.4.7

j_hepple_productsfx_new_soundMatch5.1.1

j_hepple_productsfx_video_converterMatch7.51.21

joshua_mediasoftaudio_convertor_plusMatch2.2

joshua_mediasoftvideo_converter_plusMatch3.01

magicvideosoftaremagic_audio_converterMatch8.2.6_build_719

magicvideosoftaremagic_audio_recorderMatch5.3.7

magicvideosoftaremagic_music_editorMatch5.2.2

mcfunsoftaudio_editorMatch6.3.3_build_489

mcfunsoftaudio_recorder_for_freeMatch6.1

mcfunsoftaudio_studioMatch6.6.3_build_479

mcfunsoftipod_audio_studioMatch6.2.4

mcfunsoftipod_music_converterMatch5.1

mcfunsoftrecording_to_ipod_solutionMatch5.1

mediatoxaurora_media_workshopMatch3.3.25

movavichiliburnerMatch2.3

movaviconvertmovieMatch4.4

movavidvd_to_ipodMatch1.0

movavisplitmovieMatch1.4

movavisuiteMatch3.5

movavivideomessageMatch1.0

mp3-softmp3_normalizerMatch1.03

mystik_media_productsaudioedit_deluxeMatch4.10

mystik_media_productsblaze_media_proMatch7.0

mystik_media_productsblaze_mediaconvertMatch3.4

mystik_media_productscontextconvert_proMatch3.1

nctsoft_productsnctaudioeditorMatch2.7.1

nctsoft_productsnctaudiofile2

nctsoft_productsnctaudiostudioMatch2.7.1

nctsoft_productsnctdialogicvoiceMatch2.7.1

nextlevel_systemsaudio_editor_goldMatch9.2.5_build_424

nextlevel_systemsaudio_studio_goldMatch7.0.1.1_build_500

quikscribequikscribe_playerMatch5.022.05

quikscribequikscribe_recorderMatch5.021.29

recordnriprecordnripMatch1.0

rmbsoftaudioconvertMatch3.1.0.125

rmbsoftsoundedit_proMatch2.1

roemer_softwareeasy_hi-q_converterMatch1.7

roemer_softwareeasy_hi-q_recorderMatch2.0

roemer_softwarefree_hi-q_recorderMatch1.9

sienzodigital_music_mentorMatch2.6.0.3

smart_media_systemspower_audio_editorMatch11.0.1

softdiv_softaredexsterMatch3.0

softdiv_softareivideomaxMatch3.9

softdiv_softaremp3_to_wav_converterMatch3.0

softdiv_softaresnoshMatch1.4

softdiv_softarevideozillaMatch2.5

virtual_cdvirtual_cdMatch6.0.0.7

virtual_cdvirtual_cdMatch7.1.0.2

virtual_cdvirtual_cdMatch8.0.0.6

virtual_cdvirtual_cd_file_serverMatch7.1.0.3

xrlly_softwarearial_audio_converterMatch2.3.40

xrlly_softwarearial_sound_recorderMatch1.4.3

xrlly_softwaretext_to_speech_makerMatch1.3.8

xwaver.commagic_audio_editor_proMatch10.3.1_build_476

xwaver.commagic_music_studio_proMatch7.0.2.1_build_500

CPENameOperatorVersion
altdo:convert_mp3_masteraltdo convert mp3 mastereq1.1
altdo:mp3_record_and_edit_audio_masteraltdo mp3 record and edit audio mastereq1.2
americanshareware:mp3_wav_converteramericanshareware mp3 wav convertereq3.1.8
audio_edit_magic:audio_edit_magicaudio edit magiceq9.2.3_389
bearshare:bearsharebearshareeq6.0.2.26789
cdburnerxp:cdburnerxp_procdburnerxp cdburnerxp proeq3.0.116
cheetahburner:cheetah_cd_burnercheetahburner cheetah cd burnereq3.56
cheetahburner:cheetah_dvd_burnercheetahburner cheetah dvd burnereq1.79
code-it_softare:abasic_editorcode-it softare abasic editoreq10.1
code-it_softare:wave_mp3_editorcode-it softare wave mp3 editoreq10.1

CPE	Name	Operator	Version
altdo:convert_mp3_master	altdo convert mp3 master	eq	1.1
altdo:mp3_record_and_edit_audio_master	altdo mp3 record and edit audio master	eq	1.2
americanshareware:mp3_wav_converter	americanshareware mp3 wav converter	eq	3.1.8
audio_edit_magic:audio_edit_magic	audio edit magic	eq	9.2.3_389
bearshare:bearshare	bearshare	eq	6.0.2.26789
cdburnerxp:cdburnerxp_pro	cdburnerxp cdburnerxp pro	eq	3.0.116
cheetahburner:cheetah_cd_burner	cheetahburner cheetah cd burner	eq	3.56
cheetahburner:cheetah_dvd_burner	cheetahburner cheetah dvd burner	eq	1.79
code-it_softare:abasic_editor	code-it softare abasic editor	eq	10.1
code-it_softare:wave_mp3_editor	code-it softare wave mp3 editor	eq	10.1

Rows per page:

1-10 of 831

References

secunia.com/advisories/22922

secunia.com/advisories/23475

secunia.com/advisories/23485

secunia.com/advisories/23493

secunia.com/advisories/23495

secunia.com/advisories/23511

secunia.com/advisories/23516

secunia.com/advisories/23530

secunia.com/advisories/23532

secunia.com/advisories/23534

secunia.com/advisories/23535

secunia.com/advisories/23536

secunia.com/advisories/23541

secunia.com/advisories/23542

secunia.com/advisories/23543

secunia.com/advisories/23544

secunia.com/advisories/23546

secunia.com/advisories/23548

secunia.com/advisories/23550

secunia.com/advisories/23551

secunia.com/advisories/23552

secunia.com/advisories/23553

secunia.com/advisories/23554

secunia.com/advisories/23557

secunia.com/advisories/23558

secunia.com/advisories/23560

secunia.com/advisories/23561

secunia.com/advisories/23562

secunia.com/advisories/23565

secunia.com/advisories/23568

secunia.com/advisories/23745

secunia.com/advisories/23753

secunia.com/advisories/23795

secunia.com/advisories/25993

secunia.com/advisories/26046

secunia.com/advisories/26100

secunia.com/advisories/26101

secunia.com/advisories/28407

secunia.com/advisories/30406

secunia.com/advisories/30424

secunia.com/advisories/30439

secunia.com/advisories/30446

secunia.com/advisories/30447

secunia.com/advisories/30450

secunia.com/advisories/30459

secunia.com/blog/6/

secunia.com/secunia_research/2007-10/advisory/

secunia.com/secunia_research/2007-11/advisory/

secunia.com/secunia_research/2007-12/advisory/

secunia.com/secunia_research/2007-13/advisory/

secunia.com/secunia_research/2007-14/advisory/

secunia.com/secunia_research/2007-15/advisory/

secunia.com/secunia_research/2007-16/advisory/

secunia.com/secunia_research/2007-17/advisory/

secunia.com/secunia_research/2007-18/advisory/

secunia.com/secunia_research/2007-19/advisory/

secunia.com/secunia_research/2007-2/advisory/

secunia.com/secunia_research/2007-20/advisory/

secunia.com/secunia_research/2007-21/advisory/

secunia.com/secunia_research/2007-22/advisory/

secunia.com/secunia_research/2007-23/advisory/

secunia.com/secunia_research/2007-24/advisory/

secunia.com/secunia_research/2007-25/advisory/

secunia.com/secunia_research/2007-26/advisory/

secunia.com/secunia_research/2007-27/advisory/

secunia.com/secunia_research/2007-28/advisory/

secunia.com/secunia_research/2007-29/advisory/

secunia.com/secunia_research/2007-3/advisory/

secunia.com/secunia_research/2007-30/advisory/

secunia.com/secunia_research/2007-31/advisory/

secunia.com/secunia_research/2007-32/advisory/

secunia.com/secunia_research/2007-33/advisory/

secunia.com/secunia_research/2007-34/advisory/

secunia.com/secunia_research/2007-4/advisory/

secunia.com/secunia_research/2007-5/advisory/

secunia.com/secunia_research/2007-50/advisory/

secunia.com/secunia_research/2007-6/advisory/

secunia.com/secunia_research/2007-7/advisory/

secunia.com/secunia_research/2007-8/advisory/

secunia.com/secunia_research/2007-9/advisory/

www.kb.cert.org/vuls/id/292713

www.securityfocus.com/archive/1/457936/100/200/threaded

www.securityfocus.com/archive/1/457940/100/200/threaded

www.securityfocus.com/archive/1/457965/100/200/threaded

www.securityfocus.com/bid/22196

www.securityfocus.com/bid/23892

www.vupen.com/english/advisories/2007/0310

exchange.xforce.ibmcloud.com/vulnerabilities/31707

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.952 High

EPSS

Percentile

99.4%

JSON

Related for CVE-2007-0018

kaspersky1 cert1 packetstorm2 checkpoint_advisories1 securityvulns5 cvelist1 prion1 nvd1