CVE:CVE-2008-3008
CNNVD:CNNVD-200809-109
Windows Media Encoder是一个强大的流媒体制作工具。
Windows Media Encoder 9 系列中的WMEX.DLL ActiveX控件存在缓冲区溢出漏洞。
远程攻击者可通过提供一个超长的第一个参数给GetDetailsString，执行任意代码。
solution:Upgrade microsoft windows_media_encoder to a higher version than 9_series,and avoid the version 9_series; Upgrade microsoft windows-nt to a higher version than xp:sp3,and avoid the version xp:sp3; Upgrade microsoft windows_2000 to a higher version than -:sp4,and avoid the version -:sp4; Upgrade microsoft windows_2003_server to a higher version than -,-:sp1,-:sp2,and avoid the version -:sp1,-:sp2; Upgrade microsoft windows_xp to a higher version than -:sp2,and avoid the version -:sp2