{"id":"CVE-2007-0018","aliases":["EUVD-2007-0022","GHSA-gwfv-7rcq-hxcc"],"status":"published","title":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll),...","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.37261,"percentile":0.98533,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-01-24T21:00:00Z","modified":"2026-06-16T22:34:42Z","exploits":[{"source":"exploitdb","id":"EDB-16603","title":"NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16603"},{"source":"exploitdb","id":"EDB-3728","title":"Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Overflow","type":"remote","platform":"windows","date":"2007-04-13","verified":true,"url":"https://www.exploit-db.com/exploits/3728"},{"source":"exploitdb","id":"EDB-3808","title":"Microsoft Internet Explorer - NCTAudioFile2.AudioFile ActiveX Remote Stack Overflow (2)","type":"remote","platform":"windows","date":"2007-04-27","verified":true,"url":"https://www.exploit-db.com/exploits/3808"},{"source":"metasploit","id":"exploit/windows/browser/nctaudiofile2_setformatlikesample","title":"NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-01-24","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/nctaudiofile2_setformatlikesample"}],"products":[{"vendor":"altdo","product":"convert_mp3_master"},{"vendor":"altdo","product":"mp3_record_and_edit_audio_master"},{"vendor":"americanshareware","product":"mp3_wav_converter"},{"vendor":"audio_edit_magic","product":"audio_edit_magic"},{"vendor":"bearshare","product":"bearshare"},{"vendor":"cdburnerxp","product":"cdburnerxp_pro"},{"vendor":"cheetahburner","product":"cheetah_cd_burner"},{"vendor":"cheetahburner","product":"cheetah_dvd_burner"},{"vendor":"code-it_softare","product":"abasic_editor"},{"vendor":"code-it_softare","product":"wave_mp3_editor"},{"vendor":"dandans_digital_media_products","product":"easy_audio_editor"},{"vendor":"dandans_digital_media_products","product":"full_audio_converter"},{"vendor":"dandans_digital_media_products","product":"music_editing_master"},{"vendor":"dandans_digital_media_products","product":"visual_video_converter"},{"vendor":"digital_borneo","product":"audio_mixer_and_editor"},{"vendor":"easy_ringtone_maker","product":"easy_ringtone_maker"},{"vendor":"expstudio","product":"audio_editor"},{"vendor":"iaudiosoft.com","product":"absolute_mp3_splitter"},{"vendor":"iaudiosoft.com","product":"absolute_sound_recorder"},{"vendor":"iaudiosoft.com","product":"absolute_video_to_audio_converter"},{"vendor":"imesh.com","product":"imesh"},{"vendor":"j_hepple_products","product":"fx_audio_concat"},{"vendor":"j_hepple_products","product":"fx_audio_editor"},{"vendor":"j_hepple_products","product":"fx_audio_tools"},{"vendor":"j_hepple_products","product":"fx_magic_music"},{"vendor":"j_hepple_products","product":"fx_movie_joiner"},{"vendor":"j_hepple_products","product":"fx_movie_joiner_and_splitter"},{"vendor":"j_hepple_products","product":"fx_movie_splitter"},{"vendor":"j_hepple_products","product":"fx_new_sound"},{"vendor":"j_hepple_products","product":"fx_video_converter"},{"vendor":"joshua_mediasoft","product":"audio_convertor_plus"},{"vendor":"joshua_mediasoft","product":"video_converter_plus"},{"vendor":"magicvideosoftare","product":"magic_audio_converter"},{"vendor":"magicvideosoftare","product":"magic_audio_recorder"},{"vendor":"magicvideosoftare","product":"magic_music_editor"},{"vendor":"mcfunsoft","product":"audio_editor"},{"vendor":"mcfunsoft","product":"audio_recorder_for_free"},{"vendor":"mcfunsoft","product":"audio_studio"},{"vendor":"mcfunsoft","product":"ipod_audio_studio"},{"vendor":"mcfunsoft","product":"ipod_music_converter"},{"vendor":"mcfunsoft","product":"recording_to_ipod_solution"},{"vendor":"mediatox","product":"aurora_media_workshop"},{"vendor":"movavi","product":"chiliburner"},{"vendor":"movavi","product":"convertmovie"},{"vendor":"movavi","product":"dvd_to_ipod"},{"vendor":"movavi","product":"splitmovie"},{"vendor":"movavi","product":"suite"},{"vendor":"movavi","product":"videomessage"},{"vendor":"mp3-soft","product":"mp3_normalizer"},{"vendor":"mystik_media_products","product":"audioedit_deluxe"},{"vendor":"mystik_media_products","product":"blaze_media_pro"},{"vendor":"mystik_media_products","product":"blaze_mediaconvert"},{"vendor":"mystik_media_products","product":"contextconvert_pro"},{"vendor":"nctsoft_products","product":"nctaudioeditor"},{"vendor":"nctsoft_products","product":"nctaudiofile2"},{"vendor":"nctsoft_products","product":"nctaudiostudio"},{"vendor":"nctsoft_products","product":"nctdialogicvoice"},{"vendor":"nextlevel_systems","product":"audio_editor_gold"},{"vendor":"nextlevel_systems","product":"audio_studio_gold"},{"vendor":"quikscribe","product":"quikscribe_player"},{"vendor":"quikscribe","product":"quikscribe_recorder"},{"vendor":"recordnrip","product":"recordnrip"},{"vendor":"rmbsoft","product":"audioconvert"},{"vendor":"rmbsoft","product":"soundedit_pro"},{"vendor":"roemer_software","product":"easy_hi-q_converter"},{"vendor":"roemer_software","product":"easy_hi-q_recorder"},{"vendor":"roemer_software","product":"free_hi-q_recorder"},{"vendor":"sienzo","product":"digital_music_mentor"},{"vendor":"smart_media_systems","product":"power_audio_editor"},{"vendor":"softdiv_softare","product":"dexster"},{"vendor":"softdiv_softare","product":"ivideomax"},{"vendor":"softdiv_softare","product":"mp3_to_wav_converter"},{"vendor":"softdiv_softare","product":"snosh"},{"vendor":"softdiv_softare","product":"videozilla"},{"vendor":"virtual_cd","product":"virtual_cd"},{"vendor":"virtual_cd","product":"virtual_cd_file_server"},{"vendor":"xrlly_software","product":"arial_audio_converter"},{"vendor":"xrlly_software","product":"arial_sound_recorder"},{"vendor":"xrlly_software","product":"text_to_speech_maker"},{"vendor":"xwaver.com","product":"magic_audio_editor_pro"},{"vendor":"xwaver.com","product":"magic_music_studio_pro"}],"references":[{"url":"http://secunia.com/advisories/23546","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/23892","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-7/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23535","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31707","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-12/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23562","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-27/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23536","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30459","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30406","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-29/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-24/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-8/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-9/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-13/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-20/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23553","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23551","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23485","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-50/advisory/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/23550","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-16/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/30447","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-28/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23541","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/26046","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23534","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-15/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-10/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-4/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-18/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-23/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23516","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-14/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-19/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/25993","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-17/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-31/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23495","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-32/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23558","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-33/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23544","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/457936/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/23530","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23795","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-3/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23543","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23552","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/blog/6/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23475","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23560","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30439","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/457940/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-25/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26100","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-34/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/457965/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-21/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23548","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30446","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30424","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23561","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23557","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-6/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-30/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23745","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/28407","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23493","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23511","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0310","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/23565","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-5/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-11/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-22/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2007-26/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22922","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30450","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/secunia_research/2007-2/advisory/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23568","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23532","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26101","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23753","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/23542","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/292713","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://secunia.com/advisories/23554","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/22196","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0018"},{"url":"http://secunia.com/blog/6"},{"url":"http://secunia.com/secunia_research/2007-10/advisory"},{"url":"http://secunia.com/secunia_research/2007-11/advisory"},{"url":"http://secunia.com/secunia_research/2007-12/advisory"},{"url":"http://secunia.com/secunia_research/2007-13/advisory"},{"url":"http://secunia.com/secunia_research/2007-14/advisory"},{"url":"http://secunia.com/secunia_research/2007-15/advisory"},{"url":"http://secunia.com/secunia_research/2007-16/advisory"},{"url":"http://secunia.com/secunia_research/2007-17/advisory"},{"url":"http://secunia.com/secunia_research/2007-18/advisory"},{"url":"http://secunia.com/secunia_research/2007-19/advisory"},{"url":"http://secunia.com/secunia_research/2007-2/advisory"},{"url":"http://secunia.com/secunia_research/2007-20/advisory"},{"url":"http://secunia.com/secunia_research/2007-21/advisory"},{"url":"http://secunia.com/secunia_research/2007-22/advisory"},{"url":"http://secunia.com/secunia_research/2007-23/advisory"},{"url":"http://secunia.com/secunia_research/2007-24/advisory"},{"url":"http://secunia.com/secunia_research/2007-25/advisory"},{"url":"http://secunia.com/secunia_research/2007-26/advisory"},{"url":"http://secunia.com/secunia_research/2007-27/advisory"},{"url":"http://secunia.com/secunia_research/2007-28/advisory"},{"url":"http://secunia.com/secunia_research/2007-29/advisory"},{"url":"http://secunia.com/secunia_research/2007-3/advisory"},{"url":"http://secunia.com/secunia_research/2007-30/advisory"},{"url":"http://secunia.com/secunia_research/2007-31/advisory"},{"url":"http://secunia.com/secunia_research/2007-32/advisory"},{"url":"http://secunia.com/secunia_research/2007-33/advisory"},{"url":"http://secunia.com/secunia_research/2007-34/advisory"},{"url":"http://secunia.com/secunia_research/2007-4/advisory"},{"url":"http://secunia.com/secunia_research/2007-5/advisory"},{"url":"http://secunia.com/secunia_research/2007-50/advisory"},{"url":"http://secunia.com/secunia_research/2007-6/advisory"},{"url":"http://secunia.com/secunia_research/2007-7/advisory"},{"url":"http://secunia.com/secunia_research/2007-8/advisory"},{"url":"http://secunia.com/secunia_research/2007-9/advisory"},{"url":"https://github.com/advisories/GHSA-gwfv-7rcq-hxcc"}],"sources":{"cve":[{"id":"CVE-2007-0018","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","status":"published","published":"2007-01-24T21:00:00Z","modified":"2024-08-07T12:03:36.587Z","updated_at":"2026-11-02T13:34:15.046008Z"}],"euvd":[{"id":"EUVD-2007-0022","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","status":"published","published":"2007-01-24T21:00:00Z","modified":"2024-08-07T12:03:36Z","updated_at":"2026-11-03T01:38:32.679637Z"}],"ghsa":[{"id":"GHSA-gwfv-7rcq-hxcc","title":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll),...","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","status":"published","published":"2022-05-01T17:41:21Z","modified":"2025-04-09T03:37:36Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:00:53.302842Z"}],"nvd":[{"id":"CVE-2007-0018","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","status":"published","published":"2007-01-24T21:28:00Z","modified":"2026-06-16T22:34:42.73Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:11.752648Z"}]}}