CVE-2007-0018
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument t...
Affects 81 products across 33 vendors.
Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.
Show all 12
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A stack-based buffer overflow vulnerability exists in the NCTAudioFile2.AudioFile ActiveX control, which can be exploited by remote attackers to execute arbitrary code.
BSID: BS-2007-GLOBAL-172451-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2007-0018?
What is the CVSS score for CVE-2007-0018?
Is CVE-2007-0018 actively exploited?
How do I remediate CVE-2007-0018?
What systems are affected by CVE-2007-0018?
| CVE ID | CVE-2007-0018 |
|---|---|
| BSID | BS-2007-GLOBAL-172451-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| Published | 2007-01-24 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 15% |
| Weakness (CWE) | |
| Source | NVD |
Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x.
Source: NIST NVD / MITRE CVE Database
The vulnerability is triggered by a long argument passed to the SetFormatLikeSample function in the NCTAudioFile2.dll. This allows attackers to overflow the buffer and execute arbitrary code in the context of the affected application.
Exploitation Likelihood: HIGH
| Vendor | Product | Affected Versions |
|---|---|---|
| Altdo | Mp3 Record And Edit Audio Master | 1.2 |
| Altdo | Convert Mp3 Master | 1.1 |
| Americanshareware | Mp3 Wav Converter | 3.1.8 |
| Audio Edit Magic | Audio Edit Magic | 9.2.3_389 |
| Bearshare | Bearshare | 6.0.2.26789 |
| Cdburnerxp | Cdburnerxp Pro | 3.0.116 |
| Cheetahburner | Cheetah Cd Burner | 3.56 |
| Cheetahburner | Cheetah Dvd Burner | 1.79 |
| Code-It Softare | Abasic Editor | 10.1 |
| Code-It Softare | Wave Mp3 Editor | 10.1 |
| Dandans Digital Media Products | Music Editing Master | 5.2 |
| Dandans Digital Media Products | Easy Audio Editor | 7.4 |
| Dandans Digital Media Products | Full Audio Converter | 4.2 |
| Dandans Digital Media Products | Visual Video Converter | 4.4 |
| Digital Borneo | Audio Mixer And Editor | 1.1.0 |
| Easy Ringtone Maker | Easy Ringtone Maker | 2.0.5 |
| Expstudio | Audio Editor | 4.0.2 |
| Iaudiosoft.Com | Absolute Video To Audio Converter | 2.7.9 |
| Iaudiosoft.Com | Absolute Mp3 Splitter | 2.5.4 |
| Iaudiosoft.Com | Absolute Sound Recorder | 3.4.5 |
| Imesh.Com | Imesh | 7.0.2.26789 |
| J Hepple Products | Fx Magic Music | 5.7.7 |
| J Hepple Products | Fx Movie Joiner | 6.2.8 |
| J Hepple Products | Fx Movie Splitter | 6.4.7 |
| J Hepple Products | Fx New Sound | 5.1.1 |
| J Hepple Products | Fx Video Converter | 7.51.21 |
| J Hepple Products | Fx Movie Joiner And Splitter | 6.2.8 |
| J Hepple Products | Fx Audio Concat | 1.2.0_beta |
| J Hepple Products | Fx Audio Editor | 4.7.11 |
| J Hepple Products | Fx Audio Tools | 7.3.4 |
| Joshua Mediasoft | Audio Convertor Plus | 2.2 |
| Joshua Mediasoft | Video Converter Plus | 3.01 |
| Magicvideosoftare | Magic Audio Converter | 8.2.6_build_719 |
| Magicvideosoftare | Magic Audio Recorder | 5.3.7 |
| Magicvideosoftare | Magic Music Editor | 5.2.2 |
| Mcfunsoft | Recording To Ipod Solution | 5.1 |
| Mcfunsoft | Audio Editor | 6.3.3_build_489 |
| Mcfunsoft | Audio Recorder For Free | 6.1 |
| Mcfunsoft | Audio Studio | 6.6.3_build_479 |
| Mcfunsoft | Ipod Audio Studio | 6.2.4 |
| Mcfunsoft | Ipod Music Converter | 5.1 |
| Mediatox | Aurora Media Workshop | 3.3.25 |
| Movavi | Chiliburner | 2.3 |
| Movavi | Convertmovie | 4.4 |
| Movavi | Dvd To Ipod | 1.0 |
| Movavi | Splitmovie | 1.4 |
| Movavi | Suite | 3.5 |
| Movavi | Videomessage | 1.0 |
| Mp3-Soft | Mp3 Normalizer | 1.03 |
| Mystik Media Products | Audioedit Deluxe | 4.10 |
| Mystik Media Products | Blaze Media Pro | 7.0 |
| Mystik Media Products | Blaze Mediaconvert | 3.4 |
| Mystik Media Products | Contextconvert Pro | 3.1 |
| Nctsoft Products | Nctaudioeditor | 2.7.1 |
| Nctsoft Products | Nctaudiofile2 | All versions |
| Nctsoft Products | Nctaudiostudio | 2.7.1 |
| Nctsoft Products | Nctdialogicvoice | 2.7.1 |
| Nextlevel Systems | Audio Editor Gold | 9.2.5_build_424 |
| Nextlevel Systems | Audio Studio Gold | 7.0.1.1_build_500 |
| Quikscribe | Quikscribe Player | 5.022.05 |
| Quikscribe | Quikscribe Recorder | 5.021.29 |
| Recordnrip | Recordnrip | 1.0 |
| Rmbsoft | Audioconvert | 3.1.0.125 |
| Rmbsoft | Soundedit Pro | 2.1 |
| Roemer Software | Easy Hi-Q Converter | 1.7 |
| Roemer Software | Easy Hi-Q Recorder | 2.0 |
| Roemer Software | Free Hi-Q Recorder | 1.9 |
| Sienzo | Digital Music Mentor | 2.6.0.3 |
| Smart Media Systems | Power Audio Editor | 11.0.1 |
| Softdiv Softare | Dexster | 3.0 |
| Softdiv Softare | Ivideomax | 3.9 |
| Softdiv Softare | Mp3 To Wav Converter | 3.0 |
| Softdiv Softare | Snosh | 1.4 |
| Softdiv Softare | Videozilla | 2.5 |
| Virtual Cd | Virtual Cd | 6.0.0.7 7.1.0.2 8.0.0.6 |
| Virtual Cd | Virtual Cd File Server | 7.1.0.3 |
| Xrlly Software | Arial Audio Converter | 2.3.40 |
| Xrlly Software | Arial Sound Recorder | 1.4.3 |
| Xrlly Software | Text To Speech Maker | 1.3.8 |
| Xwaver.Com | Magic Audio Editor Pro | 10.3.1_build_476 |
| Xwaver.Com | Magic Music Studio Pro | 7.0.2.1_build_500 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | ⚠ Available — Reference |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
Critical Severity - Know Your Exposure
A CVSS 9.3 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →