Vulnerability in N/a

CVE-2008-3009

Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests…

EPSS: 0.523 (98.0th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

32653 (vdb-entry, x_refsource_BID)
1021372 (vdb-entry, x_refsource_SECTRACK)
oval:org.mitre.oval:def:5942 (x_refsource_OVAL, signature, vdb-entry)
TA08-344A (x_refsource_CERT, third-party-advisory)
33058 (x_refsource_SECUNIA, third-party-advisory)
ADV-2008-3388 (vdb-entry, x_refsource_VUPEN)
1021373 (vdb-entry, x_refsource_SECTRACK)
MS08-076 (x_refsource_MS, vendor-advisory)