CVE:CVE-2007-0018
CNNVD:CNNVD-200701-427
NCTAudioFile2是NCTsoft提供的一个ActiveX控件，用于处理音频数据。
NCTAudioFile2 ActiveX控件在处理带有畸形参数的SetFormatLikeSample()方法时存在栈溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。如果攻击者能够向该方式发送超过4124字节的超长参数时，就可以触发这个溢出，导致执行任意指令。
solution:Upgrade altdo convert_mp3_master to a higher version than 1.1,and avoid the version 1.1; Upgrade altdo mp3_record_and_edit_audio_master to a higher version than 1.2,and avoid the version 1.2; Upgrade americanshareware mp3_wav_converter to a higher version than 3.1.8,and avoid the version 3.1.8; Upgrade audio_edit_magic audio_edit_magic to a higher version than 9.2.3_389,and avoid the version 9.2.3_389; Upgrade bearshare bearshare to a higher version than 6.0.2.26789,and avoid the version 6.0.2.26789; Upgrade cdburnerxp cdburnerxp_pro to a higher version than 3.0.116,and avoid the version 3.0.116; Upgrade cheetahburner cheetah_cd_burner to a higher version than 3.56,and avoid the version 3.56; Upgrade cheetahburner cheetah_dvd_burner to a higher version than 1.79,and avoid the version 1.79; Upgrade code-it_softare abasic_editor to a higher version than 10.1,and avoid the version 10.1; Upgrade code-it_softare wave_mp3_editor to a higher version than 10.1,and avoid the version 10.1; Upgrade dandans_digital_media_products easy_audio_editor to a higher version than 7.4,and avoid the version 7.4; Upgrade dandans_digital_media_products full_audio_converter to a higher version than 4.2,and avoid the version 4.2; Upgrade dandans_digital_media_products music_editing_master to a higher version than 5.2,and avoid the version 5.2; Upgrade dandans_digital_media_products visual_video_converter to a higher version than 4.4,and avoid the version 4.4; Upgrade digital_borneo audio_mixer_and_editor to a higher version than 1.1.0,and avoid the version 1.1.0; Upgrade easy_ringtone_maker easy_ringtone_maker to a higher version than 2.0.5,and avoid the version 2.0.5; Upgrade expstudio audio_editor to a higher version than 4.0.2,and avoid the version 4.0.2; Upgrade iaudiosoft.com absolute_mp3_splitter to a higher version than 2.5.4,and avoid the version 2.5.4; Upgrade iaudiosoft.com absolute_sound_recorder to a higher version than 3.4.5,and avoid the version 3.4.5; Upgrade iaudiosoft.com absolute_video_to_audio_converter to a higher version than 2.7.9,and avoid the version 2.7.9; Upgrade imesh.com imesh to a higher version than 7.0.2.26789,and avoid the version 7.0.2.26789; Upgrade j_hepple_products fx_audio_concat to a higher version than 1.2.0_beta,and avoid the version 1.2.0_beta; Upgrade j_hepple_products fx_audio_editor to a higher version than 4.7.11,and avoid the version 4.7.11; Upgrade j_hepple_products fx_audio_tools to a higher version than 7.3.4,and avoid the version 7.3.4; Upgrade j_hepple_products fx_magic_music to a higher version than 5.7.7,and avoid the version 5.7.7; Upgrade j_hepple_products fx_movie_joiner to a higher version than 6.2.8,and avoid the version 6.2.8; Upgrade j_hepple_products fx_movie_joiner_and_splitter to a higher version than 6.2.8,and avoid the version 6.2.8; Upgrade j_hepple_products fx_movie_splitter to a higher version than 6.4.7,and avoid the version 6.4.7; Upgrade j_hepple_products fx_new_sound to a higher version than 5.1.1,and avoid the version 5.1.1; Upgrade j_hepple_products fx_video_converter to a higher version than 7.51.21,and avoid the version 7.51.21; Upgrade joshua_mediasoft audio_convertor_plus to a higher version than 2.2,and avoid the version 2.2; Upgrade joshua_mediasoft video_converter_plus to a higher version than 3.01,and avoid the version 3.01; Upgrade magicvideosoftare magic_audio_converter to a higher version than 8.2.6_build_719,and avoid the version 8.2.6_build_719; Upgrade magicvideosoftare magic_audio_recorder to a higher version than 5.3.7,and avoid the version 5.3.7; Upgrade magicvideosoftare magic_music_editor to a higher version than 5.2.2,and avoid the version 5.2.2; Upgrade mcfunsoft audio_editor to a higher version than 6.3.3_build_489,and avoid the version 6.3.3_build_489; Upgrade mcfunsoft audio_recorder_for_free to a higher version than 6.1,and avoid the version 6.1; Upgrade mcfunsoft audio_studio to a higher version than 6.6.3_build_479,and avoid the version 6.6.3_build_479; Upgrade mcfunsoft ipod_audio_studio to a higher version than 6.2.4,and avoid the version 6.2.4; Upgrade mcfunsoft ipod_music_converter to a higher version than 5.1,and avoid the version 5.1; Upgrade mcfunsoft recording_to_ipod_solution to a higher version than 5.1,and avoid the version 5.1; Upgrade mediatox aurora_media_workshop to a higher version than 3.3.25,and avoid the version 3.3.25; Upgrade movavi chiliburner to a higher version than 2.3,and avoid the version 2.3; Upgrade movavi convertmovie to a higher version than 4.4,and avoid the version 4.4; Upgrade movavi dvd_to_ipod to a higher version than 1.0,and avoid the version 1.0; Upgrade movavi splitmovie to a higher version than 1.4,and avoid the version 1.4; Upgrade movavi suite to a higher version than 3.5,and avoid the version 3.5; Upgrade movavi videomessage to a higher version than 1.0,and avoid the version 1.0; Upgrade mp3-soft mp3_normalizer to a higher version than 1.03,and avoid the version 1.03; Upgrade mystik_media_products audioedit_deluxe to a higher version than 4.10,and avoid the version 4.10; Upgrade mystik_media_products blaze_media_pro to a higher version than 7.0,and avoid the version 7.0; Upgrade mystik_media_products blaze_mediaconvert to a higher version than 3.4,and avoid the version 3.4; Upgrade mystik_media_products contextconvert_pro to a higher version than 3.1,and avoid the version 3.1; Upgrade nctsoft_products nctaudioeditor to a higher version than 2.7.1,and avoid the version 2.7.1; Upgrade nctsoft_products nctaudiofile2 to a higher version than *; Upgrade nctsoft_products nctaudiostudio to a higher version than 2.7.1,and avoid the version 2.7.1; Upgrade nctsoft_products nctdialogicvoice to a higher version than 2.7.1,and avoid the version 2.7.1; Upgrade nextlevel_systems audio_editor_gold to a higher version than 9.2.5_build_424,and avoid the version 9.2.5_build_424; Upgrade nextlevel_systems audio_studio_gold to a higher version than 7.0.1.1_build_500,and avoid the version 7.0.1.1_build_500; Upgrade quikscribe quikscribe_player to a higher version than 5.022.05,and avoid the version 5.022.05; Upgrade quikscribe quikscribe_recorder to a higher version than 5.021.29,and avoid the version 5.021.29; Upgrade recordnrip recordnrip to a higher version than 1.0,and avoid the version 1.0; Upgrade rmbsoft audioconvert to a higher version than 3.1.0.125,and avoid the version 3.1.0.125; Upgrade rmbsoft soundedit_pro to a higher version than 2.1,and avoid the version 2.1; Upgrade roemer_software easy_hi-q_converter to a higher version than 1.7,and avoid the version 1.7; Upgrade roemer_software easy_hi-q_recorder to a higher version than 2.0,and avoid the version 2.0; Upgrade roemer_software free_hi-q_recorder to a higher version than 1.9,and avoid the version 1.9; Upgrade sienzo digital_music_mentor to a higher version than 2.6.0.3,and avoid the version 2.6.0.3; Upgrade smart_media_systems power_audio_editor to a higher version than 11.0.1,and avoid the version 11.0.1; Upgrade softdiv_softare dexster to a higher version than 3.0,and avoid the version 3.0; Upgrade softdiv_softare ivideomax to a higher version than 3.9,and avoid the version 3.9; Upgrade softdiv_softare mp3_to_wav_converter to a higher version than 3.0,and avoid the version 3.0; Upgrade softdiv_softare snosh to a higher version than 1.4,and avoid the version 1.4; Upgrade softdiv_softare videozilla to a higher version than 2.5,and avoid the version 2.5; Upgrade virtual_cd virtual_cd to a higher version than 6.0.0.7,7.1.0.2,8.0.0.6,and avoid the version 6.0.0.7,7.1.0.2,8.0.0.6; Upgrade virtual_cd virtual_cd_file_server to a higher version than 7.1.0.3,and avoid the version 7.1.0.3; Upgrade xrlly_software arial_audio_converter to a higher version than 2.3.40,and avoid the version 2.3.40; Upgrade xrlly_software arial_sound_recorder to a higher version than 1.4.3,and avoid the version 1.4.3; Upgrade xrlly_software text_to_speech_maker to a higher version than 1.3.8,and avoid the version 1.3.8; Upgrade xwaver.com magic_audio_editor_pro to a higher version than 10.3.1_build_476,and avoid the version 10.3.1_build_476; Upgrade xwaver.com magic_music_studio_pro to a higher version than 7.0.2.1_build_500,and avoid the version 7.0.2.1_build_500