Unscored severity · published Dec 10, 2008
CVE-2008-3009
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN)…
–
CVSS
15.8%
EPSS
No
On KEV
Description
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)15.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WM
Windows Media Format Runtime · Microsoft
7.1; 11; 11; 9.5; 9.5; 9 · source: NVD
WM
Windows Media Player · Microsoft
6.4 · source: NVD
WM
Windows Media Services · Microsoft
4.1; 9; 2008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3009
secunia.com
http://secunia.com/advisories/33058
www.securityfocus.com
http://www.securityfocus.com/bid/32653
www.securitytracker.com
http://www.securitytracker.com/id?1021372
www.securitytracker.com
http://www.securitytracker.com/id?1021373
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA08-344A.html
www.vupen.com
http://www.vupen.com/english/advisories/2008/3388
More from Windows Media Format Runtime
–
CVE-2013-3127
The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player…
–
CVE-2010-1879
Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to…
–
CVE-2009-2525
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize…
–
CVE-2009-0555
Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced…
–
CVE-2009-2499
Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute…