Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.3
CVSSv2

CVE-2008-3008

Published: 11/09/2008 Updated: 30/10/2018
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Microsoft

Vulnerability Summary

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote malicious users to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows_media_encoder 9_series

microsoft windows_2003_server -

microsoft windows_xp -

microsoft windows-nt xp

microsoft windows_2000 -

Exploits

Exploit DB: Microsoft Windows Media Encoder 9 - 'wmex.dll' ActiveX Buffer Overflow (MS08-053) (Metasploit)
## # $Id: ms08_053_mediaencoderrb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...
Exploit DB: Microsoft Windows Media Encoder (Windows XP SP2) - 'wmex.dll' ActiveX Buffer Overflow (MS08-053)
<html> <pre> ============================================================================= MS08-053 Windows Media Encoder wmexdll ActiveX Control Buffer Overflow ============================================================================= Calc execution POC Exploit for WinXP SP2 PRO English / IE60 SP2 Found by : Nguyen Mi ...

References

CWE-119http://marc.info/?l=bugtraq&m=122235754013992&w=2http://www.kb.cert.org/vuls/id/996227http://www.us-cert.gov/cas/techalerts/TA08-253A.htmlhttp://www.securitytracker.com/id?1020832http://www.securityfocus.com/bid/31065http://www.vupen.com/english/advisories/2008/2521https://www.exploit-db.com/exploits/6454https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053https://nvd.nist.govhttps://www.exploit-db.com/exploits/16521/https://www.kb.cert.org/vuls/id/996227
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook