CVE-2007-0018 : 詳細

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.

関連する弱点

メトリクス

EPSS

EPSSスコア

EPSSパーセンタイル

エクスプロイト情報

Exploit Database EDB-ID : 3728

公開日 : 2007-04-12 22h00 +00:00
著者 : InTeL
EDB検証済み : Yes

Exploit Database EDB-ID : 3808

公開日 : 2007-04-26 22h00 +00:00
著者 : shinnai
EDB検証済み : Yes

Exploit Database EDB-ID : 16603

公開日 : 2010-07-02 22h00 +00:00
著者 : Metasploit
EDB検証済み : Yes

関連製品

構成 0

Altdo>>Convert_mp3_master >> Version 1.1

Altdo>>Mp3_record_and_edit_audio_master >> Version 1.2

Americanshareware>>Mp3_wav_converter >> Version 3.1.8

Audio_edit_magic>>Audio_edit_magic >> Version 9.2.3_389

Bearshare>>Bearshare >> Version 6.0.2.26789

Cdburnerxp>>Cdburnerxp_pro >> Version 3.0.116

Cheetahburner>>Cheetah_cd_burner >> Version 3.56

Cheetahburner>>Cheetah_dvd_burner >> Version 1.79

Code-it_softare>>Abasic_editor >> Version 10.1

Code-it_softare>>Wave_mp3_editor >> Version 10.1

Dandans_digital_media_products>>Easy_audio_editor >> Version 7.4

Dandans_digital_media_products>>Full_audio_converter >> Version 4.2

Dandans_digital_media_products>>Music_editing_master >> Version 5.2

Dandans_digital_media_products>>Visual_video_converter >> Version 4.4

Digital_borneo>>Audio_mixer_and_editor >> Version 1.1.0

Easy_ringtone_maker>>Easy_ringtone_maker >> Version 2.0.5

Expstudio>>Audio_editor >> Version 4.0.2

Iaudiosoft.com>>Absolute_mp3_splitter >> Version 2.5.4

Iaudiosoft.com>>Absolute_sound_recorder >> Version 3.4.5

Iaudiosoft.com>>Absolute_video_to_audio_converter >> Version 2.7.9

Imesh.com>>Imesh >> Version 7.0.2.26789

J_hepple_products>>Fx_audio_concat >> Version 1.2.0_beta

J_hepple_products>>Fx_audio_editor >> Version 4.7.11

J_hepple_products>>Fx_audio_tools >> Version 7.3.4

J_hepple_products>>Fx_magic_music >> Version 5.7.7

J_hepple_products>>Fx_movie_joiner >> Version 6.2.8

J_hepple_products>>Fx_movie_joiner_and_splitter >> Version 6.2.8

J_hepple_products>>Fx_movie_splitter >> Version 6.4.7

J_hepple_products>>Fx_new_sound >> Version 5.1.1

J_hepple_products>>Fx_video_converter >> Version 7.51.21

Joshua_mediasoft>>Audio_convertor_plus >> Version 2.2

Joshua_mediasoft>>Video_converter_plus >> Version 3.01

Magicvideosoftare>>Magic_audio_converter >> Version 8.2.6_build_719

Magicvideosoftare>>Magic_audio_recorder >> Version 5.3.7

Magicvideosoftare>>Magic_music_editor >> Version 5.2.2

Mcfunsoft>>Audio_editor >> Version 6.3.3_build_489

Mcfunsoft>>Audio_recorder_for_free >> Version 6.1

Mcfunsoft>>Audio_studio >> Version 6.6.3_build_479

Mcfunsoft>>Ipod_audio_studio >> Version 6.2.4

Mcfunsoft>>Ipod_music_converter >> Version 5.1

Mcfunsoft>>Recording_to_ipod_solution >> Version 5.1

Mediatox>>Aurora_media_workshop >> Version 3.3.25

Movavi>>Chiliburner >> Version 2.3

Movavi>>Convertmovie >> Version 4.4

Movavi>>Dvd_to_ipod >> Version 1.0

Movavi>>Splitmovie >> Version 1.4

Movavi>>Suite >> Version 3.5

Movavi>>Videomessage >> Version 1.0

Mp3-soft>>Mp3_normalizer >> Version 1.03

Mystik_media_products>>Audioedit_deluxe >> Version 4.10

Mystik_media_products>>Blaze_media_pro >> Version 7.0

Mystik_media_products>>Blaze_mediaconvert >> Version 3.4

Mystik_media_products>>Contextconvert_pro >> Version 3.1

Nctsoft_products>>Nctaudioeditor >> Version 2.7.1

Nctsoft_products>>Nctaudiofile2 >> Version *

Nctsoft_products>>Nctaudiostudio >> Version 2.7.1

Nctsoft_products>>Nctdialogicvoice >> Version 2.7.1

Nextlevel_systems>>Audio_editor_gold >> Version 9.2.5_build_424

Nextlevel_systems>>Audio_studio_gold >> Version 7.0.1.1_build_500

Quikscribe>>Quikscribe_player >> Version 5.022.05

Quikscribe>>Quikscribe_recorder >> Version 5.021.29

Recordnrip>>Recordnrip >> Version 1.0

Rmbsoft>>Audioconvert >> Version 3.1.0.125

Rmbsoft>>Soundedit_pro >> Version 2.1

Roemer_software>>Easy_hi-q_converter >> Version 1.7

Roemer_software>>Easy_hi-q_recorder >> Version 2.0

Roemer_software>>Free_hi-q_recorder >> Version 1.9

Sienzo>>Digital_music_mentor >> Version 2.6.0.3

Smart_media_systems>>Power_audio_editor >> Version 11.0.1

Softdiv_softare>>Dexster >> Version 3.0

Softdiv_softare>>Ivideomax >> Version 3.9

Softdiv_softare>>Mp3_to_wav_converter >> Version 3.0

Softdiv_softare>>Snosh >> Version 1.4

Softdiv_softare>>Videozilla >> Version 2.5

Virtual_cd>>Virtual_cd >> Version 6.0.0.7

Virtual_cd>>Virtual_cd >> Version 7.1.0.2

Virtual_cd>>Virtual_cd >> Version 8.0.0.6

Virtual_cd>>Virtual_cd_file_server >> Version 7.1.0.3

Xrlly_software>>Arial_audio_converter >> Version 2.3.40

Xrlly_software>>Arial_sound_recorder >> Version 1.4.3

Xrlly_software>>Text_to_speech_maker >> Version 1.3.8

Xwaver.com>>Magic_audio_editor_pro >> Version 10.3.1_build_476

Xwaver.com>>Magic_music_studio_pro >> Version 7.0.2.1_build_500

参考資料