CVE-2008-3009
high · 10Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
10
CVSS
15.8%
EPSS (exploit prob.)
97th
EPSS percentile
2008-12-10
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_media_player | 6.4 |
| microsoft | windows_2000 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_media_format_runtime | 7.1 |
| microsoft | windows_2000 | all versions |
| microsoft | windows_media_services | 4.1 |
| microsoft | windows_2000 | all versions |
| microsoft | windows_media_services | 9 |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_media_services | 2008 |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_media_format_runtime | 11 |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_server_2008 | all versions |
| microsoft | windows_vista | all versions |
| microsoft | windows_vista | all versions |
| microsoft | windows_vista | gold |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_media_format_runtime | 11 |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_media_format_runtime | 9.5 |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/33058
- http://www.securityfocus.com/bid/32653
- http://www.securitytracker.com/id?1021372
- http://www.securitytracker.com/id?1021373
- http://www.us-cert.gov/cas/techalerts/TA08-344A.html
- http://www.vupen.com/english/advisories/2008/3388
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5942
- http://secunia.com/advisories/33058
- http://www.securityfocus.com/bid/32653
- http://www.securitytracker.com/id?1021372
- http://www.securitytracker.com/id?1021373
- http://www.us-cert.gov/cas/techalerts/TA08-344A.html
- http://www.vupen.com/english/advisories/2008/3388
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5942
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-3009