Information disclosure in Microsoft Windows_live_messenger

CVE-2008-5828

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAnd…

Vulnerability class: Information Disclosure

EPSS: 0.143 (96.2th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_live_messenger — versions 8.0, 8.1, 8.5
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)