{"cve":"CVE-2007-0018","nvd":{"published":"2007-01-24T21:28:00.000","modified":"2026-06-16T22:34:42.730","status":"Modified","description":"Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-119"],"references":["http://secunia.com/advisories/22922","http://secunia.com/advisories/23475","http://secunia.com/advisories/23485","http://secunia.com/advisories/23493","http://secunia.com/advisories/23495"],"products":["altdo:convert_mp3_master","altdo:mp3_record_and_edit_audio_master","americanshareware:mp3_wav_converter","audio_edit_magic:audio_edit_magic","bearshare:bearshare","cdburnerxp:cdburnerxp_pro","cheetahburner:cheetah_cd_burner","cheetahburner:cheetah_dvd_burner","code-it_softare:abasic_editor","code-it_softare:wave_mp3_editor","dandans_digital_media_products:easy_audio_editor","dandans_digital_media_products:full_audio_converter","dandans_digital_media_products:music_editing_master","dandans_digital_media_products:visual_video_converter","digital_borneo:audio_mixer_and_editor","easy_ringtone_maker:easy_ringtone_maker","expstudio:audio_editor","iaudiosoft.com:absolute_mp3_splitter","iaudiosoft.com:absolute_sound_recorder","iaudiosoft.com:absolute_video_to_audio_converter","imesh.com:imesh","j_hepple_products:fx_audio_concat","j_hepple_products:fx_audio_editor","j_hepple_products:fx_audio_tools","j_hepple_products:fx_magic_music","j_hepple_products:fx_movie_joiner","j_hepple_products:fx_movie_joiner_and_splitter","j_hepple_products:fx_movie_splitter","j_hepple_products:fx_new_sound","j_hepple_products:fx_video_converter","joshua_mediasoft:audio_convertor_plus","joshua_mediasoft:video_converter_plus","magicvideosoftare:magic_audio_converter","magicvideosoftare:magic_audio_recorder","magicvideosoftare:magic_music_editor","mcfunsoft:audio_editor","mcfunsoft:audio_recorder_for_free","mcfunsoft:audio_studio","mcfunsoft:ipod_audio_studio","mcfunsoft:ipod_music_converter","mcfunsoft:recording_to_ipod_solution","mediatox:aurora_media_workshop","movavi:chiliburner","movavi:convertmovie","movavi:dvd_to_ipod","movavi:splitmovie","movavi:suite","movavi:videomessage","mp3-soft:mp3_normalizer","mystik_media_products:audioedit_deluxe"],"source":"nvd","synced_at":"2026-10-19T19:44:49.019236172+00:00"},"epss":{"cve":"CVE-2007-0018","score":0.37261,"percentile":0.98525,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}