cbcvebase.
CVE-2008-5828
published 2009-01-02

CVE-2008-5828: Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to…

PriorityP429medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
14.30%
96.2th percentile
Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.

Affected

4 ranges
VendorProductVersion rangeFixed in
microsoftwindows_live_messenger<= 8.5.1—
microsoftwindows_live_messenger——
microsoftwindows_live_messenger——
microsoftwindows_live_messenger——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.