NVD

Id
2902  
Name
CVE-2008-3009  
Description
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-3009  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18382 2902 CVE-2008-3009 oval:org.mitre.oval:def:5942  View
18383 2902 CVE-2008-3009 MS08-076  View
18384 2902 CVE-2008-3009 32653  View
18385 2902 CVE-2008-3009 1021372  View
18386 2902 CVE-2008-3009 1021373  View
18387 2902 CVE-2008-3009 TA08-344A  View
18388 2902 CVE-2008-3009 ADV-2008-3388  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46889 JVNDB-2008-002199 Windows Media コンポーネントにおける SPN 識別子の処理に関する任意のコードを実行される脆弱性 Windows Media コンポーネントには、認証リクエストへの応答を検証する際の Service Principal Name (SPN) 識別子の処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3009 33122 CVE-2008-3009 2902 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002199.html 2008-12-09 2009-01-21 View