kbrain

CVE-2007-0018

HIGH · CVSS 9.3EPSS 37.3%EU EUVD

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.

Key facts

CVSS score
9.3 (v2.0)
Severity
HIGH
CVSS vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness (CWE)
CWE-119
EPSS score
37.3% (99th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2007-0022)
Published
January 24, 2007
NVD last modified
June 16, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-0022 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

  • altdo / convert mp3 master
  • altdo / mp3 record and edit audio master
  • americanshareware / mp3 wav converter
  • audio edit magic / audio edit magic
  • bearshare / bearshare
  • cdburnerxp / cdburnerxp pro
  • cheetahburner / cheetah cd burner
  • cheetahburner / cheetah dvd burner
  • code-it softare / abasic editor
  • code-it softare / wave mp3 editor
  • dandans digital media products / easy audio editor
  • dandans digital media products / full audio converter
  • dandans digital media products / music editing master
  • dandans digital media products / visual video converter
  • digital borneo / audio mixer and editor
  • easy ringtone maker / easy ringtone maker
  • expstudio / audio editor
  • iaudiosoft.com / absolute mp3 splitter
  • iaudiosoft.com / absolute sound recorder
  • iaudiosoft.com / absolute video to audio converter
  • imesh.com / imesh
  • j hepple products / fx audio concat
  • j hepple products / fx audio editor
  • j hepple products / fx audio tools
  • j hepple products / fx magic music
  • j hepple products / fx movie joiner
  • j hepple products / fx movie joiner and splitter
  • j hepple products / fx movie splitter
  • j hepple products / fx new sound
  • j hepple products / fx video converter
  • joshua mediasoft / audio convertor plus
  • joshua mediasoft / video converter plus
  • magicvideosoftare / magic audio converter
  • magicvideosoftare / magic audio recorder
  • magicvideosoftare / magic music editor
  • mcfunsoft / audio editor
  • mcfunsoft / audio recorder for free
  • mcfunsoft / audio studio
  • mcfunsoft / ipod audio studio
  • mcfunsoft / ipod music converter
  • mcfunsoft / recording to ipod solution
  • mediatox / aurora media workshop
  • movavi / chiliburner
  • movavi / convertmovie
  • movavi / dvd to ipod
  • movavi / splitmovie
  • movavi / suite
  • movavi / videomessage
  • mp3-soft / mp3 normalizer
  • mystik media products / audioedit deluxe

and 33 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain