PT-2007-1514 · Mcfunsoft+12 · Audio Recorder For Free+25

Carsten Eiram + 1 · Published 2007-01-24 · Updated 2018-10-16 · CVE-2007-0018

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll) version not specified Multiple products are affected, including: NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice Magic Audio Recorder, Music Editor, and Audio Converter Aurora Media Workshop DB Audio Mixer And Editor J. Hepple Products including Fx Audio Editor and others EXPStudio Audio Editor iMesh Quikscribe RMBSoft AudioConvert and SoundEdit Pro 2.1 CDBurnerXP Code-it Software Wave MP3 Editor and aBasic Editor Movavi VideoMessage, DVD to iPod, and others SoftDiv Software Dexster, iVideoMAX, and others Sienzo Digital Music Mentor (DMM) MP3 Normalizer Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter Audio Edit Magic Joshua Video and Audio Converter Virtual CD Cheetah CD and DVD Burner Mystik Media AudioEdit Deluxe, Blaze Media, and others Power Audio Editor DanDans Digital Media Full Audio Converter, Music Editing Master, and others Xrlly Software Text to Speech Maker and Arial Sound Recorder / Audio Converter Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter Easy Ringtone Maker RecordNRip McFunSoft iPod Audio Studio, Audio Recorder for Free, and others MP3 WAV Converter BearShare 6.0.2.26789 Oracle Siebel SimBuilder and CRM 7.x

Description A stack-based buffer overflow issue exists in the NCTAudioFile2.AudioFile ActiveX control, which can be exploited by remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function.

Recommendations For the NCTAudioFile2.AudioFile ActiveX control, consider disabling the SetFormatLikeSample function until a patch is available. Restrict access to the NCTAudioFile2.dll module to minimize the risk of exploitation. Avoid using the SetFormatLikeSample function in affected products until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0018

Affected Products

Arial Sound Recorder / Audio Converter

Audio Recorder For Free

Audioconvert

Audioedit Deluxe

Blaze Media

Dvd To Ipod

Dandans Digital Media Full Audio Converter

Dexster

Digital Music Mentor

Easy Hi-Q Converter

Free/Easy Hi-Q Recorder

Fx Audio Editor

Mcfunsoft Ipod Audio Studio

Movavi Videomessage

Music Editing Master

Nctaudioeditor

Nctaudiofile2.Audiofile Activex Control

Nctaudiostudio

Nctdialogicvoice

Oracle Siebel Crm

Oracle Siebel Simbuilder

Soundedit Pro

Text To Speech Maker

Wave Mp3 Editor

Abasic Editor

Ivideomax

References · 93

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/nctaudiofile2_setformatlikesample.rb · Exploit
• 🔥 https://exploit-db.com/exploits/3728 · Exploit
• 🔥 https://exploit-db.com/exploits/3808 · Exploit
• 🔥 https://exploit-db.com/exploits/16603 · Exploit
• http://secunia.com/advisories/23516 · Vendor Advisory
• http://secunia.com/secunia_research/2007-16/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-10/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0018 · Security Note
• http://secunia.com/secunia_research/2007-21/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-28/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-11/advisory · Vendor Advisory
• http://secunia.com/advisories/23543 · Vendor Advisory
• http://secunia.com/secunia_research/2007-24/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-2/advisory · Vendor Advisory
• http://secunia.com/secunia_research/2007-34/advisory · Vendor Advisory