1. Home
  2. CVE Database
  3. CVE-2008-5828
MEDIUM · 5.0

CVE-2008-5828

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers ...

Vulnerability Description

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MicrosoftWindows Live Messenger<= 8.5.1

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2008-5828?

CVE-2008-5828 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers ...

How severe is CVE-2008-5828?

CVE-2008-5828 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2008-5828?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows Live Messenger.