CVE-2008-3008: Microsoft Windows-Nt

High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."

Affected products

• Microsoft Windows-Nt: version xp only
• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows 2003 Server: affected versions not specified
• Microsoft Windows Media Encoder: version 9_series only
• Microsoft Windows XP: affected versions not specified

Published 2008-09-11. Last modified 2026-06-16.