KLA10252 ACE vulnerability in multiple software

A buffer overflow was found in multiple products, exploiting NCTAudioFile2.AudioFile. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed call.

Original advisories

Related products

NCTAudioFile2-ActiveX-Control

CVE list

CVE-2007-0018 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll)