CVE-2007-3493: Microsoft Internet Explorer

High severity, CVSS 7.5. EPSS: 31.3% chance of exploitation in the next 30 days.

A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably other products, allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the CreateFile method, a different product than CVE-2007-3400.

Affected products

• Microsoft Internet Explorer: version 7.0 only
• Nctsoft Products Nctaudiostudio: version 2.7 only
• Nctsoft Products NCTWAVCHUNKSEDITOR2.DLL: version 2.6.1.148 only

Published 2007-06-29. Last modified 2026-06-16.