CVE-2008-3008

2008-09-1101:11:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-3008

buffer overflow

wmencprofilemanager

activex

windows media encoder

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.961 High

EPSS

Percentile

99.5%

JSON

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka “Windows Media Encoder Buffer Overrun Vulnerability.”

CPENameOperatorVersion
microsoft:windows_media_encodermicrosoft windows media encodereq9_series
microsoft:windows-ntmicrosoft windows-nteqxp
microsoft:windows_2000microsoft windows 2000eq-
microsoft:windows_2003_servermicrosoft windows 2003 servereq-
microsoft:windows_xpmicrosoft windows xpeq-

CPE	Name	Operator	Version
microsoft:windows_media_encoder	microsoft windows media encoder	eq	9_series
microsoft:windows-nt	microsoft windows-nt	eq	xp
microsoft:windows_2000	microsoft windows 2000	eq	-
microsoft:windows_2003_server	microsoft windows 2003 server	eq	-
microsoft:windows_xp	microsoft windows xp	eq	-