QwikSec

Security Database

CVE

CWE

Training

CVE-2007-3493

Published: Jun 29, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_OSVDB

http://www.shinnai.altervista.org/exploits/ntcwavchunkstxt.html

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

nctaudiostudio2-createfile-file-overwrite(35081)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1182845325.ff.php&page=last

x_refsource_MISC

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.