News
Vigil@nce: Windows Media Encoder, code execution
September 2008 by Vigil@nce
SYNTHESIS
An attacker can use an ActiveX installed by Windows Media Encoder in order to execute code on victim’s computer.
Gravity: 3/4
Consequences: user access/rights
Provenance: internet server
Means of attack: no proof of concept, no attack
Ability of attacker: expert (4/4)
Confidence: confirmed by the editor (5/5)
Diffusion of the vulnerable configuration: high (3/3)
Creation date: 10/09/2008
Identifier: VIGILANCE-VUL-8099
IMPACTED PRODUCTS
Microsoft Windows 2000 [confidential versions]
Microsoft Windows 2003 [confidential versions]
Microsoft Windows 2008
Microsoft Windows Vista [confidential versions]
Microsoft Windows XP [confidential versions]
DESCRIPTION
The Windows Media Encoder 9 Series product is used to create rich multimedia contents. This product is not installed by default under Windows.
This product installs the WMEX.DLL ActiveX. This ActiveX is tagged as Safe For Scripting, whereas it was not conceived in a secure manner. An attacker can therefore use malicious parameters in order to execute code.
An attacker can thus create a HTML page calling this ActiveX in order to execute code on the computer of the victim displaying the page.
CHARACTERISTICS
Identifiers: BID-31065, CVE-2008-3008, MS08-053, VIGILANCE-VUL-8099, VU#996227
Tweeter
