CVE-2008-3008

EPSS 54.6%

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/6454unverified exploitdbwww.exploit-db.com/exploits/16521unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=122235754013992&w=2 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018 https://www.exploit-db.com/exploits/6454 http://www.kb.cert.org/vuls/id/996227 http://www.securityfocus.com/bid/31065 http://www.securitytracker.com/id?1020832 http://www.us-cert.gov/cas/techalerts/TA08-253A.html http://www.vupen.com/english/advisories/2008/2521