← Database

CVE-2007-3493

HIGH CVSS: 7.5 Published: 2007-06-29 Modified: 2026-06-16

Description

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Affected Platforms

Nctsoft Products Nctwavchunkseditor2.DllNctsoft Products NctaudiostudioMicrosoft Windows XpMicrosoft Internet Explorer

Weakness Type

NVD-CWE-Other

References