Secunia Research has discovered a vulnerability in NCTAudioFile2, a largely used software component which can be exploited by malicious people to compromise a user's system.
The severity of this vulnerability has been set highly critical because it can lead to remote system compromise.
The vulnerability is caused due to a boundary error in the NCTAudioFile2.AudioFile ActiveX control when handling the "SetFormatLikeSample()" method. This can be exploited to cause a stack-based buffer overflow by passing an overly long string (about 4124 bytes) as argument to the affected method.Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website. The Secunia solution is to set the kill-bit for the affected ActiveX control.
Affected Software The list of affected applications is massive : more than 100 MP3 / audio applications are vulnerable. Make an urgent update if you are using one of the following applications
Xrlly Software Text to Speech Maker 1 Xrlly Software Arial Sound Recorder 1 Xrlly Software Arial Audio Converter 2 Stefan Haglund, Fredrik Haglund, Florian Schmitz CDBurner XP Pro 3 Stefan Haglund, Fredrik Haglund, Florian Schmitz CDBurner XP Pro 2 Stefan Bethge CDBurnerXP Pro 3.0.116 SoftDiv VIDEOzilla 2 SoftDiv Snosh 1 SoftDiv MP3 to WAV Converter 3 SoftDiv iVideoMAX 3 SoftDiv Dexster Audio Editor 3 SmartMedia Systems Power Audio Editor 11 Sienzo Digital Music Mentor 2 Roemer Software Free Hi-Q Recorder 1.9 Roemer Software Easy Hi-Q Recorder 2.0 Roemer Software Easy Hi-Q Converter 1.7 RMBSoft AudioConvert 3.1.0.125 RMBSoft Audio Converter 3 Recordnrip RecordNRip 1 Quikscribe Recorder 5 Quikscribe Player 5 NextLevel Software Audio Studio Gold 7 NextLevel Software Audio Editor Gold 9 NextLevel Software Audio Editor Gold 0.2.5 Build 424 NCTsoft NCTDialogicVoice ActiveX DLL 2 NCTsoft NCTAudioStudio ActiveX DLL 2 NCTsoft NCTAudioEditor ActiveX DLL 2 Mystik Media ContextConvert Pro 3.1 Mystik Media Context Convert Pro 3 Mystik Media Blaze Media Pro 7 Mystik Media Blaze Media Pro 6 Mystik Media Blaze Media Convert 3.4 Mystik Media Blaze Media Convert 3 Mystik Media AudioEdit Deluxe 4.10 Mystik Media AudioEdit Deluxe 4 Mystik Media AudioEdit Deluxe 3 Musiclab BearShare 6.0.2 MP3-Soft MP3 Normalizer 1.03 Movavi VideoSuite 3 Movavi VideoMessage 1 Movavi Splitmovie 1 Movavi DVD to iPod 1 Movavi ConvertMovie 4 Movavi ConvertMovie 3 Movavi ChiliBurner 2 McFunSoft Recording to iPod Solution 5 McFunSoft iPod Music Converter 5 McFunSoft iPod Audio Studio 6 McFunSoft Audio Studio 6 McFunSoft Audio Recorder for Free 6 McFunSoft Audio Editor 6 Magic Video Software Magic Music Editor 5 Magic Video Software Magic Audio Recorder 5 Magic Video Software Magic Audio Converter 8 Joshua Mediasoft Video Converter Plus 3.01 Joshua Mediasoft Audio Converter Plus 2.2 J. Hepple FX Video Converter 7 J. Hepple FX New Sound 5 J. Hepple FX Movie Splitter 6 J. Hepple FX Movie Joiner 6 J. Hepple FX Magic Music 5 J. Hepple FX Joiner and Splitter 6 J. Hepple FX ConCat Audio Joiner 1 J. Hepple FX Audio Tools 7 J. Hepple FX Audio Editor 4 iMesh iMesh 7 H+H Software Virtual CD File Server 7 H+H Software Virtual CD 8 H+H Software Virtual CD 7 H+H Software Virtual CD 6 EXPStudio Audio Editor 4 Easy Ringtone Maker Easy Ringtone Maker 2 Digital Borneo DB Audio Mixer and Editor 1.1 Digital Borneo DB Audio Mixer and Editor 1 DanDans Digital Media Visual Video Converter 4 DanDans Digital Media Music Editing Master 5 DanDans Digital Media Full Audio Converter 4 DanDans Digital Media Easy Audio Editor 7 Cool Audio Software Magic Music Studio Pro 7 Cool Audio Software Magic Audio Editor Pro 10 Code-it Software Wave MP3 Editor 10 Code-it Software aBasic Editor 10.1 Code-it Software aBasic Editor 10 Cheetah Website Corporation DVD Burner 1.79 Cheetah Website Corporation DVD Burner 1 Cheetah Website Corporation CD Burner 3.56 Cheetah Website Corporation CD Burner 3 Aurora Software Aurora Media Workshop 3.3.25 Aurora Software Aurora Media Workshop 3 AudioEditMagic Audio Edit Magic 9.2.3 AudioEditMagic Audio Edit Magic 9.2.3 389 Arial Sound Recorder 1.4.3 Arial Audio Converter 2.3.40 American Shareware Technologies MP3 WAV Converter 3 Altdo Software Mp3 Record&Edit Audio Master 1 Altdo Software Mp3 Record&Edit Audio Maste 1.2 Altdo Software Convert Mp3 Master 1.1 Altdo Software Altdo Convert Mp3 Master 1 Absolute Software Video to Audio Converter 2.7.9 Absolute Software Sound Recorder 3.4.5 Absolute Software MP3 Splitter 2.5.4 Absolute Software Absolute Video to Audio Converter 2 Absolute Software Absolute Sound Recorder 3 Absolute Software Absolute MP3 Splitter 2
