NCTsoft NCTAudioFile2 ActiveX Control Remote Buffer Overflow Vulnerability

NCTsoft NCTAudioFile2 ActiveX Control Remote Buffer Overflow Vulnerability

NCTsoft NCTAudioFile2 ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory buffer.

NCTAudioEditor is a collection of ActiveX controls for manipulating audio data. Numerous audio software products use the vulnerable 'NCTAudioFile2.AudioFile' ActiveX component.

NCTAudioStudio 2.7.1, NCTAudioEditor 2.7.1, and NCTDialogicVoice 2.7.1 are affected by this vulnerability; other versions may be affected as well.

NOTE: Please see the vulnerable systems section for third-party products that are affected because they depend on this ActiveX control.