CVE-2007-3400: Nctsoft Nctaudioeditor

High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days.

The NCTAudioEditor2 ActiveX control in NCTWMAFile2.dll 2.6.2.157, as distributed in NCTAudioEditor and NCTAudioStudio 2.7, allows remote attackers to overwrite arbitrary files via the CreateFile method.

Affected products

• Nctsoft Nctaudioeditor: version _nil_ only
• Nctsoft Nctaudiostudio: version 2.7 only

Published 2007-06-26. Last modified 2026-06-16.