CVE-2007-3493 : A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Published 2007-06-29 18:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-3493

Microsoft » Internet Explorer » Version: 7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Xp » Update SP2
Nctsoft Products » Nctaudiostudio » Version: 2.7
cpe:2.3:a:nctsoft_products:nctaudiostudio:2.7:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Xp » Update SP2
Nctsoft Products » Nctwavchunkseditor2.dll » Version: 2.6.1.148
cpe:2.3:a:nctsoft_products:nctwavchunkseditor2.dll:2.6.1.148:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Xp » Update SP2

Exploit prediction scoring system (EPSS) score for CVE-2007-3493

EPSS FAQ

43.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3493

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2007-3493

Jump to

Vulnerability Details : CVE-2007-3493

Products affected by CVE-2007-3493

Exploit prediction scoring system (EPSS) score for CVE-2007-3493

CVSS scores for CVE-2007-3493

References for CVE-2007-3493