Vulnerability Details : CVE-2007-3493
A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.
Products affected by CVE-2007-3493
- cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:nctsoft_products:nctaudiostudio:2.7:*:*:*:*:*:*:*
- cpe:2.3:a:nctsoft_products:nctwavchunkseditor2.dll:2.6.1.148:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2007-3493
43.02%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2007-3493
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2007-3493
-
http://osvdb.org/37673
-
http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1182845325.ff.php&page=last
-
https://www.exploit-db.com/exploits/4109
-
http://www.vupen.com/english/advisories/2007/2351
-
http://www.securityfocus.com/bid/24656
-
http://www.shinnai.altervista.org/exploits/ntcwavchunkstxt.html
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/35081
-
http://secunia.com/advisories/25851
Vendor Advisory
Jump to