Microsoft Windows Media Encoder vulnerabilities

3 CVEs affecting Microsoft Windows Media Encoder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-3965, published 2010-12-16.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-3008, published 2008-09-11. High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first…
• CVE-2010-1879, published 2010-06-08. High severity, CVSS 9.3. EPSS: 20.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary…
• CVE-2010-3965, published 2010-12-16. High severity, CVSS 9.3. EPSS: 11.6% chance of exploitation in the next 30 days. Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows…