Unrated severityNVD Advisory· Published Sep 11, 2008· Updated Jun 16, 2026
CVE-2008-3008
CVE-2008-3008
Description
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:microsoft:windows_media_encoder:9_series:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:windows_media_encoder:9_series:*:*:*:*:*:*:*
- (no CPE)range: 9 Series
- cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_2003_server:-:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:-:*:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows-nt:xp:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
Patches
Vulnerability mechanics
References
9- www.kb.cert.org/vuls/id/996227nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/31065nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.us-cert.gov/cas/techalerts/TA08-253A.htmlnvdThird Party AdvisoryUS Government Resource
- marc.infonvdMailing List
- www.vupen.com/english/advisories/2008/2521nvdBroken Link
- docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-053nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6018nvd
- www.exploit-db.com/exploits/6454nvd
News mentions
0No linked articles in our index yet.