CVE-2008-3008
Windows Media Encoder 9 wmex.dll ActiveX Buffer Overflow
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."
Desbordamiento de búfer basado en pila en el control WMEncProfileManager ActiveX en wmex.dll en Microsoft Windows Media Encoder 9 Series permite a atacantes remotos ejecutar un código arbitrario a través de un primer argumento largo en el método GetDetailsString, también conocido como "Windows Media Encoder Buffer Overrun Vulnerability".
Various potential security vulnerabilities have been identified in Microsoft software that is running on the Storage Management Appliance (SMA). Some of these vulnerabilities may be pertinent to the SMA, please check the table in the Resolution section of this Security Bulletin.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-07-07 CVE Reserved
- 2008-09-10 CVE Published
- 2009-11-26 First Exploit
- 2024-08-07 CVE Updated
- 2025-05-26 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/996227 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/31065 | Third Party Advisory | |
| http://www.securitytracker.com/id?1020832 | Third Party Advisory | |
| http://www.us-cert.gov/cas/techalerts/TA08-253A.html | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2008/2521 | Broken Link | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018 | Signature |
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/83176 | 2009-11-26 | |
| https://www.exploit-db.com/exploits/16521 | 2011-03-10 | |
| https://www.exploit-db.com/exploits/6454 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://marc.info/?l=bugtraq&m=122235754013992&w=2 | 2018-10-30 | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053 | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | 2008 Search vendor "Microsoft" for product "Windows-nt" and version "2008" | - |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | 2008 Search vendor "Microsoft" for product "Windows-nt" and version "2008" | x64 |
Safe
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows-nt Search vendor "Microsoft" for product "Windows-nt" | xp Search vendor "Microsoft" for product "Windows-nt" and version "xp" | sp3 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2000 Search vendor "Microsoft" for product "Windows 2000" | - | sp4 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | - | x64 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | - | sp1 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | - | sp2 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows 2003 Server Search vendor "Microsoft" for product "Windows 2003 Server" | - | sp2, x64 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2 |
Affected
|
| Microsoft Search vendor "Microsoft" | Windows Media Encoder Search vendor "Microsoft" for product "Windows Media Encoder" | 9_series Search vendor "Microsoft" for product "Windows Media Encoder" and version "9_series" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Xp Search vendor "Microsoft" for product "Windows Xp" | - | sp2, x64 |
Affected
|