CVE:CVE-2007-3493
CNNVD:CNNVD-200706-526
NCTAudioStudio2 ActiveX Control是softpedia的一个控件。
NCTAudioStudio2 ActiveX Control NCTWavChunksEditor.DLL中存在任意文件重写漏洞。远程攻击者可以借助对创建文件方式的参数中的全路径名，创建或重写任意文件。
solution:Upgrade microsoft internet_explorer to a higher version than 7.0,and avoid the version 7.0; Upgrade nctsoft_products nctaudiostudio to a higher version than 2.7,and avoid the version 2.7; Upgrade nctsoft_products nctwavchunkseditor2.dll to a higher version than 2.6.1.148,and avoid the version 2.6.1.148