PT-2008-4442 · Microsoft · Windows Media Services+2

Published 2008-12-10 · Updated 2018-10-12 · CVE-2008-3010

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player version 6.4 Windows Media Format Runtime versions 7.1 through 11 Windows Media Services versions 4.1 and 9

Description The issue allows remote servers to capture NTLM credentials and execute arbitrary code through credential-reflection attacks by sending an authentication request. This occurs because the software incorrectly associates ISATAP addresses with the Local Intranet zone.

Recommendations For Microsoft Windows Media Player version 6.4, update to a version that correctly handles ISATAP addresses. For Windows Media Format Runtime versions 7.1 through 11, update to a version that correctly handles ISATAP addresses. For Windows Media Services versions 4.1 and 9, update to a version that correctly handles ISATAP addresses.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-3010

Affected Products

Windows Media Format Runtime

Windows Media Player

Windows Media Services

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-3010 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-076 · Vendor Advisory
• http://securitytracker.com/id?1021375 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5689 · Note
• http://secunia.com/advisories/33058 · Note
• http://securitytracker.com/id?1021374 · Note
• http://securityfocus.com/bid/32654 · Note
• http://vupen.com/english/advisories/2008/3388 · Note
• http://us-cert.gov/cas/techalerts/TA08-344A.html · Note