Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control…
Priority HIGH 67CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.
Why it matters now
EPSS 0.37261 98th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 83
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:altdo:convert_mp3_master:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Altdo |
| cpe:2.3:a:altdo:mp3_record_and_edit_audio_master:1.2:*:*:*:*:*:*:* | 1.2 | Vulnerable | Altdo |
| cpe:2.3:a:americanshareware:mp3_wav_converter:3.1.8:*:*:*:*:*:*:* | 3.1.8 | Vulnerable | Americanshareware |
| cpe:2.3:a:audio_edit_magic:audio_edit_magic:9.2.3_389:*:*:*:*:*:*:* | 9.2.3_389 | Vulnerable | Audio Edit Magic |
| cpe:2.3:a:bearshare:bearshare:6.0.2.26789:*:*:*:*:*:*:* | 6.0.2.26789 | Vulnerable | Bearshare |
| cpe:2.3:a:cdburnerxp:cdburnerxp_pro:3.0.116:*:*:*:*:*:*:* | 3.0.116 | Vulnerable | Cdburnerxp |
| cpe:2.3:a:cheetahburner:cheetah_cd_burner:3.56:*:*:*:*:*:*:* | 3.56 | Vulnerable | Cheetahburner |
| cpe:2.3:a:cheetahburner:cheetah_dvd_burner:1.79:*:*:*:*:*:*:* | 1.79 | Vulnerable | Cheetahburner |
| cpe:2.3:a:code-it_softare:abasic_editor:10.1:*:*:*:*:*:*:* | 10.1 | Vulnerable | Code-it Softare |
| cpe:2.3:a:code-it_softare:wave_mp3_editor:10.1:*:*:*:*:*:*:* | 10.1 | Vulnerable | Code-it Softare |
- cpe:2.3:a:altdo:convert_mp3_master:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Altdo
- cpe:2.3:a:altdo:mp3_record_and_edit_audio_master:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Altdo
- cpe:2.3:a:americanshareware:mp3_wav_converter:3.1.8:*:*:*:*:*:*:* Versions 3.1.8 Vulnerable ·Americanshareware
- cpe:2.3:a:audio_edit_magic:audio_edit_magic:9.2.3_389:*:*:*:*:*:*:* Versions 9.2.3_389 Vulnerable ·Audio Edit Magic
- cpe:2.3:a:bearshare:bearshare:6.0.2.26789:*:*:*:*:*:*:* Versions 6.0.2.26789 Vulnerable ·Bearshare
- cpe:2.3:a:cdburnerxp:cdburnerxp_pro:3.0.116:*:*:*:*:*:*:* Versions 3.0.116 Vulnerable ·Cdburnerxp
- cpe:2.3:a:cheetahburner:cheetah_cd_burner:3.56:*:*:*:*:*:*:* Versions 3.56 Vulnerable ·Cheetahburner
- cpe:2.3:a:cheetahburner:cheetah_dvd_burner:1.79:*:*:*:*:*:*:* Versions 1.79 Vulnerable ·Cheetahburner
- cpe:2.3:a:code-it_softare:abasic_editor:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Code-it Softare
- cpe:2.3:a:code-it_softare:wave_mp3_editor:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Code-it Softare
Show 73 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dandans_digital_media_products:easy_audio_editor:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Dandans Digital Media Products |
| cpe:2.3:a:dandans_digital_media_products:full_audio_converter:4.2:*:*:*:*:*:*:* | 4.2 | Vulnerable | Dandans Digital Media Products |
| cpe:2.3:a:dandans_digital_media_products:music_editing_master:5.2:*:*:*:*:*:*:* | 5.2 | Vulnerable | Dandans Digital Media Products |
| cpe:2.3:a:dandans_digital_media_products:visual_video_converter:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Dandans Digital Media Products |
| cpe:2.3:a:digital_borneo:audio_mixer_and_editor:1.1.0:*:*:*:*:*:*:* | 1.1.0 | Vulnerable | Digital Borneo |
| cpe:2.3:a:easy_ringtone_maker:easy_ringtone_maker:2.0.5:*:*:*:*:*:*:* | 2.0.5 | Vulnerable | Easy Ringtone Maker |
| cpe:2.3:a:expstudio:audio_editor:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | Expstudio |
| cpe:2.3:a:iaudiosoft.com:absolute_mp3_splitter:2.5.4:*:*:*:*:*:*:* | 2.5.4 | Vulnerable | Iaudiosoft.com |
| cpe:2.3:a:iaudiosoft.com:absolute_sound_recorder:3.4.5:*:*:*:*:*:*:* | 3.4.5 | Vulnerable | Iaudiosoft.com |
| cpe:2.3:a:iaudiosoft.com:absolute_video_to_audio_converter:2.7.9:*:*:*:*:*:*:* | 2.7.9 | Vulnerable | Iaudiosoft.com |
| cpe:2.3:a:imesh.com:imesh:7.0.2.26789:*:*:*:*:*:*:* | 7.0.2.26789 | Vulnerable | Imesh.com |
| cpe:2.3:a:j_hepple_products:fx_audio_concat:1.2.0_beta:*:*:*:*:*:*:* | 1.2.0_beta | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_audio_editor:4.7.11:*:*:*:*:*:*:* | 4.7.11 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_audio_tools:7.3.4:*:*:*:*:*:*:* | 7.3.4 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_magic_music:5.7.7:*:*:*:*:*:*:* | 5.7.7 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_movie_joiner:6.2.8:*:*:*:*:*:*:* | 6.2.8 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_movie_joiner_and_splitter:6.2.8:*:*:*:*:*:*:* | 6.2.8 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_movie_splitter:6.4.7:*:*:*:*:*:*:* | 6.4.7 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_new_sound:5.1.1:*:*:*:*:*:*:* | 5.1.1 | Vulnerable | J Hepple Products |
| cpe:2.3:a:j_hepple_products:fx_video_converter:7.51.21:*:*:*:*:*:*:* | 7.51.21 | Vulnerable | J Hepple Products |
| cpe:2.3:a:joshua_mediasoft:audio_convertor_plus:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Joshua Mediasoft |
| cpe:2.3:a:joshua_mediasoft:video_converter_plus:3.01:*:*:*:*:*:*:* | 3.01 | Vulnerable | Joshua Mediasoft |
| cpe:2.3:a:magicvideosoftare:magic_audio_converter:8.2.6_build_719:*:*:*:*:*:*:* | 8.2.6_build_719 | Vulnerable | Magicvideosoftare |
| cpe:2.3:a:magicvideosoftare:magic_audio_recorder:5.3.7:*:*:*:*:*:*:* | 5.3.7 | Vulnerable | Magicvideosoftare |
| cpe:2.3:a:magicvideosoftare:magic_music_editor:5.2.2:*:*:*:*:*:*:* | 5.2.2 | Vulnerable | Magicvideosoftare |
| cpe:2.3:a:mcfunsoft:audio_editor:6.3.3_build_489:*:*:*:*:*:*:* | 6.3.3_build_489 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mcfunsoft:audio_recorder_for_free:6.1:*:*:*:*:*:*:* | 6.1 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mcfunsoft:audio_studio:6.6.3_build_479:*:*:*:*:*:*:* | 6.6.3_build_479 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mcfunsoft:ipod_audio_studio:6.2.4:*:*:*:*:*:*:* | 6.2.4 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mcfunsoft:ipod_music_converter:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mcfunsoft:recording_to_ipod_solution:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Mcfunsoft |
| cpe:2.3:a:mediatox:aurora_media_workshop:3.3.25:*:*:*:*:*:*:* | 3.3.25 | Vulnerable | Mediatox |
| cpe:2.3:a:movavi:chiliburner:2.3:*:*:*:*:*:*:* | 2.3 | Vulnerable | Movavi |
| cpe:2.3:a:movavi:convertmovie:4.4:*:*:*:*:*:*:* | 4.4 | Vulnerable | Movavi |
| cpe:2.3:a:movavi:dvd_to_ipod:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Movavi |
| cpe:2.3:a:movavi:splitmovie:1.4:*:*:*:*:*:*:* | 1.4 | Vulnerable | Movavi |
| cpe:2.3:a:movavi:suite:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | Movavi |
| cpe:2.3:a:movavi:videomessage:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Movavi |
| cpe:2.3:a:mp3-soft:mp3_normalizer:1.03:*:*:*:*:*:*:* | 1.03 | Vulnerable | Mp3-soft |
| cpe:2.3:a:mystik_media_products:audioedit_deluxe:4.10:*:*:*:*:*:*:* | 4.10 | Vulnerable | Mystik Media Products |
| cpe:2.3:a:mystik_media_products:blaze_media_pro:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Mystik Media Products |
| cpe:2.3:a:mystik_media_products:blaze_mediaconvert:3.4:*:*:*:*:*:*:* | 3.4 | Vulnerable | Mystik Media Products |
| cpe:2.3:a:mystik_media_products:contextconvert_pro:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Mystik Media Products |
| cpe:2.3:a:nctsoft_products:nctaudioeditor:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Nctsoft Products |
| cpe:2.3:a:nctsoft_products:nctaudiofile2:*:*:*:*:*:*:*:* | all versions | Vulnerable | Nctsoft Products |
| cpe:2.3:a:nctsoft_products:nctaudiostudio:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Nctsoft Products |
| cpe:2.3:a:nctsoft_products:nctdialogicvoice:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Nctsoft Products |
| cpe:2.3:a:nextlevel_systems:audio_editor_gold:9.2.5_build_424:*:*:*:*:*:*:* | 9.2.5_build_424 | Vulnerable | Nextlevel Systems |
| cpe:2.3:a:nextlevel_systems:audio_studio_gold:7.0.1.1_build_500:*:*:*:*:*:*:* | 7.0.1.1_build_500 | Vulnerable | Nextlevel Systems |
| cpe:2.3:a:quikscribe:quikscribe_player:5.022.05:*:*:*:*:*:*:* | 5.022.05 | Vulnerable | Quikscribe |
| cpe:2.3:a:quikscribe:quikscribe_recorder:5.021.29:*:*:*:*:*:*:* | 5.021.29 | Vulnerable | Quikscribe |
| cpe:2.3:a:recordnrip:recordnrip:1.0:*:*:*:*:*:*:* | 1.0 | Vulnerable | Recordnrip |
| cpe:2.3:a:rmbsoft:audioconvert:3.1.0.125:*:*:*:*:*:*:* | 3.1.0.125 | Vulnerable | Rmbsoft |
| cpe:2.3:a:rmbsoft:soundedit_pro:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Rmbsoft |
| cpe:2.3:a:roemer_software:easy_hi-q_converter:1.7:*:*:*:*:*:*:* | 1.7 | Vulnerable | Roemer Software |
| cpe:2.3:a:roemer_software:easy_hi-q_recorder:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Roemer Software |
| cpe:2.3:a:roemer_software:free_hi-q_recorder:1.9:*:*:*:*:*:*:* | 1.9 | Vulnerable | Roemer Software |
| cpe:2.3:a:sienzo:digital_music_mentor:2.6.0.3:*:*:*:*:*:*:* | 2.6.0.3 | Vulnerable | Sienzo |
| cpe:2.3:a:smart_media_systems:power_audio_editor:11.0.1:*:*:*:*:*:*:* | 11.0.1 | Vulnerable | Smart Media Systems |
| cpe:2.3:a:softdiv_softare:dexster:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Softdiv Softare |
| cpe:2.3:a:softdiv_softare:ivideomax:3.9:*:*:*:*:*:*:* | 3.9 | Vulnerable | Softdiv Softare |
| cpe:2.3:a:softdiv_softare:mp3_to_wav_converter:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Softdiv Softare |
| cpe:2.3:a:softdiv_softare:snosh:1.4:*:*:*:*:*:*:* | 1.4 | Vulnerable | Softdiv Softare |
| cpe:2.3:a:softdiv_softare:videozilla:2.5:*:*:*:*:*:*:* | 2.5 | Vulnerable | Softdiv Softare |
| cpe:2.3:a:virtual_cd:virtual_cd:6.0.0.7:*:*:*:*:*:*:* | 6.0.0.7 | Vulnerable | Virtual Cd |
| cpe:2.3:a:virtual_cd:virtual_cd:7.1.0.2:*:*:*:*:*:*:* | 7.1.0.2 | Vulnerable | Virtual Cd |
| cpe:2.3:a:virtual_cd:virtual_cd:8.0.0.6:*:*:*:*:*:*:* | 8.0.0.6 | Vulnerable | Virtual Cd |
| cpe:2.3:a:virtual_cd:virtual_cd_file_server:7.1.0.3:*:*:*:*:*:*:* | 7.1.0.3 | Vulnerable | Virtual Cd |
| cpe:2.3:a:xrlly_software:arial_audio_converter:2.3.40:*:*:*:*:*:*:* | 2.3.40 | Vulnerable | Xrlly Software |
| cpe:2.3:a:xrlly_software:arial_sound_recorder:1.4.3:*:*:*:*:*:*:* | 1.4.3 | Vulnerable | Xrlly Software |
| cpe:2.3:a:xrlly_software:text_to_speech_maker:1.3.8:*:*:*:*:*:*:* | 1.3.8 | Vulnerable | Xrlly Software |
| cpe:2.3:a:xwaver.com:magic_audio_editor_pro:10.3.1_build_476:*:*:*:*:*:*:* | 10.3.1_build_476 | Vulnerable | Xwaver.com |
| cpe:2.3:a:xwaver.com:magic_music_studio_pro:7.0.2.1_build_500:*:*:*:*:*:*:* | 7.0.2.1_build_500 | Vulnerable | Xwaver.com |
- cpe:2.3:a:dandans_digital_media_products:easy_audio_editor:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Dandans Digital Media Products
- cpe:2.3:a:dandans_digital_media_products:full_audio_converter:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Dandans Digital Media Products
- cpe:2.3:a:dandans_digital_media_products:music_editing_master:5.2:*:*:*:*:*:*:* Versions 5.2 Vulnerable ·Dandans Digital Media Products
- cpe:2.3:a:dandans_digital_media_products:visual_video_converter:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Dandans Digital Media Products
- cpe:2.3:a:digital_borneo:audio_mixer_and_editor:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Digital Borneo
- cpe:2.3:a:easy_ringtone_maker:easy_ringtone_maker:2.0.5:*:*:*:*:*:*:* Versions 2.0.5 Vulnerable ·Easy Ringtone Maker
- cpe:2.3:a:expstudio:audio_editor:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Expstudio
- cpe:2.3:a:iaudiosoft.com:absolute_mp3_splitter:2.5.4:*:*:*:*:*:*:* Versions 2.5.4 Vulnerable ·Iaudiosoft.com
- cpe:2.3:a:iaudiosoft.com:absolute_sound_recorder:3.4.5:*:*:*:*:*:*:* Versions 3.4.5 Vulnerable ·Iaudiosoft.com
- cpe:2.3:a:iaudiosoft.com:absolute_video_to_audio_converter:2.7.9:*:*:*:*:*:*:* Versions 2.7.9 Vulnerable ·Iaudiosoft.com
- cpe:2.3:a:imesh.com:imesh:7.0.2.26789:*:*:*:*:*:*:* Versions 7.0.2.26789 Vulnerable ·Imesh.com
- cpe:2.3:a:j_hepple_products:fx_audio_concat:1.2.0_beta:*:*:*:*:*:*:* Versions 1.2.0_beta Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_audio_editor:4.7.11:*:*:*:*:*:*:* Versions 4.7.11 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_audio_tools:7.3.4:*:*:*:*:*:*:* Versions 7.3.4 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_magic_music:5.7.7:*:*:*:*:*:*:* Versions 5.7.7 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_movie_joiner:6.2.8:*:*:*:*:*:*:* Versions 6.2.8 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_movie_joiner_and_splitter:6.2.8:*:*:*:*:*:*:* Versions 6.2.8 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_movie_splitter:6.4.7:*:*:*:*:*:*:* Versions 6.4.7 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_new_sound:5.1.1:*:*:*:*:*:*:* Versions 5.1.1 Vulnerable ·J Hepple Products
- cpe:2.3:a:j_hepple_products:fx_video_converter:7.51.21:*:*:*:*:*:*:* Versions 7.51.21 Vulnerable ·J Hepple Products
- cpe:2.3:a:joshua_mediasoft:audio_convertor_plus:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Joshua Mediasoft
- cpe:2.3:a:joshua_mediasoft:video_converter_plus:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·Joshua Mediasoft
- cpe:2.3:a:magicvideosoftare:magic_audio_converter:8.2.6_build_719:*:*:*:*:*:*:* Versions 8.2.6_build_719 Vulnerable ·Magicvideosoftare
- cpe:2.3:a:magicvideosoftare:magic_audio_recorder:5.3.7:*:*:*:*:*:*:* Versions 5.3.7 Vulnerable ·Magicvideosoftare
- cpe:2.3:a:magicvideosoftare:magic_music_editor:5.2.2:*:*:*:*:*:*:* Versions 5.2.2 Vulnerable ·Magicvideosoftare
- cpe:2.3:a:mcfunsoft:audio_editor:6.3.3_build_489:*:*:*:*:*:*:* Versions 6.3.3_build_489 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mcfunsoft:audio_recorder_for_free:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mcfunsoft:audio_studio:6.6.3_build_479:*:*:*:*:*:*:* Versions 6.6.3_build_479 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mcfunsoft:ipod_audio_studio:6.2.4:*:*:*:*:*:*:* Versions 6.2.4 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mcfunsoft:ipod_music_converter:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mcfunsoft:recording_to_ipod_solution:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Mcfunsoft
- cpe:2.3:a:mediatox:aurora_media_workshop:3.3.25:*:*:*:*:*:*:* Versions 3.3.25 Vulnerable ·Mediatox
- cpe:2.3:a:movavi:chiliburner:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Movavi
- cpe:2.3:a:movavi:convertmovie:4.4:*:*:*:*:*:*:* Versions 4.4 Vulnerable ·Movavi
- cpe:2.3:a:movavi:dvd_to_ipod:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Movavi
- cpe:2.3:a:movavi:splitmovie:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Movavi
- cpe:2.3:a:movavi:suite:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Movavi
- cpe:2.3:a:movavi:videomessage:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Movavi
- cpe:2.3:a:mp3-soft:mp3_normalizer:1.03:*:*:*:*:*:*:* Versions 1.03 Vulnerable ·Mp3-soft
- cpe:2.3:a:mystik_media_products:audioedit_deluxe:4.10:*:*:*:*:*:*:* Versions 4.10 Vulnerable ·Mystik Media Products
- cpe:2.3:a:mystik_media_products:blaze_media_pro:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Mystik Media Products
- cpe:2.3:a:mystik_media_products:blaze_mediaconvert:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Mystik Media Products
- cpe:2.3:a:mystik_media_products:contextconvert_pro:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Mystik Media Products
- cpe:2.3:a:nctsoft_products:nctaudioeditor:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Nctsoft Products
- cpe:2.3:a:nctsoft_products:nctaudiofile2:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nctsoft Products
- cpe:2.3:a:nctsoft_products:nctaudiostudio:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Nctsoft Products
- cpe:2.3:a:nctsoft_products:nctdialogicvoice:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Nctsoft Products
- cpe:2.3:a:nextlevel_systems:audio_editor_gold:9.2.5_build_424:*:*:*:*:*:*:* Versions 9.2.5_build_424 Vulnerable ·Nextlevel Systems
- cpe:2.3:a:nextlevel_systems:audio_studio_gold:7.0.1.1_build_500:*:*:*:*:*:*:* Versions 7.0.1.1_build_500 Vulnerable ·Nextlevel Systems
- cpe:2.3:a:quikscribe:quikscribe_player:5.022.05:*:*:*:*:*:*:* Versions 5.022.05 Vulnerable ·Quikscribe
- cpe:2.3:a:quikscribe:quikscribe_recorder:5.021.29:*:*:*:*:*:*:* Versions 5.021.29 Vulnerable ·Quikscribe
- cpe:2.3:a:recordnrip:recordnrip:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Recordnrip
- cpe:2.3:a:rmbsoft:audioconvert:3.1.0.125:*:*:*:*:*:*:* Versions 3.1.0.125 Vulnerable ·Rmbsoft
- cpe:2.3:a:rmbsoft:soundedit_pro:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Rmbsoft
- cpe:2.3:a:roemer_software:easy_hi-q_converter:1.7:*:*:*:*:*:*:* Versions 1.7 Vulnerable ·Roemer Software
- cpe:2.3:a:roemer_software:easy_hi-q_recorder:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Roemer Software
- cpe:2.3:a:roemer_software:free_hi-q_recorder:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·Roemer Software
- cpe:2.3:a:sienzo:digital_music_mentor:2.6.0.3:*:*:*:*:*:*:* Versions 2.6.0.3 Vulnerable ·Sienzo
- cpe:2.3:a:smart_media_systems:power_audio_editor:11.0.1:*:*:*:*:*:*:* Versions 11.0.1 Vulnerable ·Smart Media Systems
- cpe:2.3:a:softdiv_softare:dexster:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Softdiv Softare
- cpe:2.3:a:softdiv_softare:ivideomax:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·Softdiv Softare
- cpe:2.3:a:softdiv_softare:mp3_to_wav_converter:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Softdiv Softare
- cpe:2.3:a:softdiv_softare:snosh:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Softdiv Softare
- cpe:2.3:a:softdiv_softare:videozilla:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Softdiv Softare
- cpe:2.3:a:virtual_cd:virtual_cd:6.0.0.7:*:*:*:*:*:*:* Versions 6.0.0.7 Vulnerable ·Virtual Cd
- cpe:2.3:a:virtual_cd:virtual_cd:7.1.0.2:*:*:*:*:*:*:* Versions 7.1.0.2 Vulnerable ·Virtual Cd
- cpe:2.3:a:virtual_cd:virtual_cd:8.0.0.6:*:*:*:*:*:*:* Versions 8.0.0.6 Vulnerable ·Virtual Cd
- cpe:2.3:a:virtual_cd:virtual_cd_file_server:7.1.0.3:*:*:*:*:*:*:* Versions 7.1.0.3 Vulnerable ·Virtual Cd
- cpe:2.3:a:xrlly_software:arial_audio_converter:2.3.40:*:*:*:*:*:*:* Versions 2.3.40 Vulnerable ·Xrlly Software
- cpe:2.3:a:xrlly_software:arial_sound_recorder:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Xrlly Software
- cpe:2.3:a:xrlly_software:text_to_speech_maker:1.3.8:*:*:*:*:*:*:* Versions 1.3.8 Vulnerable ·Xrlly Software
- cpe:2.3:a:xwaver.com:magic_audio_editor_pro:10.3.1_build_476:*:*:*:*:*:*:* Versions 10.3.1_build_476 Vulnerable ·Xwaver.com
- cpe:2.3:a:xwaver.com:magic_music_studio_pro:7.0.2.1_build_500:*:*:*:*:*:*:* Versions 7.0.2.1_build_500 Vulnerable ·Xwaver.com
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-0018
- 2026-10-03 Alias added: GHSA-gwfv-7rcq-hxcc
References
Advisory 1
Other 1
Sources
- CVE-2007-0018 · CVE Program
- CVE-2007-0018 · NVD
- FIRST EPSS
- GHSA-gwfv-7rcq-hxcc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences