NVD

Id
2903  
Name
CVE-2008-3010  
Description
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka "ISATAP Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-12-10  
Modified Date
2011-03-07  
Seq
2008-3010  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18389 2903 CVE-2008-3010 oval:org.mitre.oval:def:5689  View
18390 2903 CVE-2008-3010 MS08-076  View
18391 2903 CVE-2008-3010 32654  View
18392 2903 CVE-2008-3010 1021374  View
18393 2903 CVE-2008-3010 1021375  View
18394 2903 CVE-2008-3010 TA08-344A  View
18395 2903 CVE-2008-3010 ADV-2008-3388  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46890 JVNDB-2008-002200 Windows Media コンポーネントにおける NTLM 資格情報を取得される脆弱性 Windows Media コンポーネントには、ISATAP アドレスとローカルイントラネットゾーンを不正に関連づけるため、NTLM 資格情報を取得される、または任意のコードを実行される脆弱性が存在します。 CVE-2008-3010 33123 CVE-2008-3010 2903 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002200.html 2008-12-09 2009-01-21 View