[Released Date] 06.18.2007 [Title] NCTAudioFile2 ActiveX Buffer Overflow Exploit [Vulnerabilty] CVE-2007-0018 [Category] Exploits/Client Side [Platform] Windows [Description] 
This module exploits a vulnerability in the NCTAudioFile2.AudioFile ActiveX Control (NCTAudioFile2.dll) used by various multimedia applications. The exploit is triggered when a long string argument is processed by the SetFormatLikeSample() method resulting in a stack-based buffer overflow. This module runs a malicious web site on the CORE IMPACT Console and waits for an unsuspecting user to trigger the exploit by connecting to the web site.