MS.Windows.Media.Encoder.WMEX.DLL.Buffer.Overflow

Release Date Sep 11, 2008
Severity low
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Microsoft Windows Media Encoder. The vulnerability is in the ActiveX control WMEX.DLL. It is caused by the application's inability to properly check the bounds of user-supplied input. Successful exploitation may result to remote code execution.
Affected Products Microsoft Windows Media Encoder version 9
Recommended Actions Apply the patch, available from the following web site: http://www.microsoft.com/technet/security/Bulletin/ms08-053.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2008-3008
Reference/s http://milw0rm.org/exploits/6454 http://technet.microsoft.com/en-us/security/bulletin/ms08-053.mspx (MS-ID) http://www.securityfocus.com/bid/31065 (BugTraq)

Fortinet