← Database

CVE-2008-5828

MEDIUM CVSS: 5.0 Published: 2009-01-02 Modified: 2026-06-16

Description

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.

Affected Platforms

Microsoft Windows Live Messenger

Weakness Type

CWE-200

References