CVE-2008-3010

N/A

Published: December 10, 2008 at 01:33 PM UTC

Updated: June 16, 2026 at 10:54 PM UTC

5 products affected across 1 vendorWindows Media PlayerWindows XpWindows Server 2003

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 15%

Description

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1 and 9 incorrectly associate ISATAP addresses with the Local Intranet zone, which allows remote servers to capture NTLM credentials, and execute arbitrary code through credential-reflection attacks, by sending an authentication request, aka "ISATAP Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Windows Media Player · Microsoft

95%

6.4

microsoft-windows-2000 (environment) · microsoft-windows-2003-server (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-xp (environment)

Windows 2000 · Microsoftdevice

80%

All versions

Windows 2003 Server · Microsoftdevice

80%

All versions

Windows Server 2003 · Microsoftdevice

80%

All versions

Windows Xp · Microsoftdevice

80%

All versions