EIP-2026-118948

This exploit targets an insecure method in NCTVideoStudio ActiveX DLLs (Version 1.6) to create arbitrary files on the system. The PoC uses the 'CreateFile' method via an ActiveX object to write a file to 'c:\system_.ini' when a button is clicked.