Microsoft » Windows Media Encoder : Security Vulnerabilities, CVEs,
Untrusted search path vulnerability in Windows Media Encoder 9 on Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Windows Media Profile (PRX) file, aka "Insecure Library Loading Vulnerability."
Max CVSS
9.3
EPSS Score
96.43%
Published
2010-12-16
Updated
2023-12-07
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka "Media Decompression Vulnerability."
Max CVSS
9.3
EPSS Score
93.87%
Published
2010-06-08
Updated
2018-10-12
CVE-2008-3008
Public exploit
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetailsString method, aka "Windows Media Encoder Buffer Overrun Vulnerability."
Max CVSS
9.3
EPSS Score
96.10%
Published
2008-09-11
Updated
2018-10-30
3 vulnerabilities found