CVE-2008-3010 Information disclosure in n/a

Critical 10.0 Published 10 Dec 2008 Updated 7 Aug 2024

Remote attackers can capture NTLM credentials and execute code via ISATAP zone misconfiguration in Windows Media components.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2008-3010?

CVE-2008-3010 is a critical vulnerability in Microsoft Windows Media Player, published on 10 Dec 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka "ISATAP Vulnerability."

Weakness: CWE-200

Which versions are affected by CVE-2008-3010?

It affects 1 product.

Products include Microsoft Windows Media Player.

How do I fix CVE-2008-3010?

No fix has been published for CVE-2008-3010 yet. Limit exposure of the affected software until one is available.

Is CVE-2008-3010 being exploited?

There is no known exploitation of CVE-2008-3010 in the wild and no public exploit code.

All Microsoft Windows Media Player vulnerabilities

Sources

Also known as GHSA-h9wh-q83g-2p6c.