Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 22:33:29 +0000 certa-2008-avi-590 — Plusieurs vulnérabilités dans les composants <span class="textit">Windows Media</span> permettent à une personne malint… https://cve.radiocsirt.org/vuln/certa-2008-avi-590 certa-2008-avi-590 https://cve.radiocsirt.org/vuln/certa-2008-avi-590 EUVD-2026-128111 https://cve.radiocsirt.org/vuln/euvd-2026-128111 EUVD-2026-128111 https://cve.radiocsirt.org/vuln/euvd-2026-128111 fkie_cve-2008-3009 https://cve.radiocsirt.org/vuln/fkie_cve-2008-3009 <p>Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka &#34;SPN Vulnerability.&#34;</p> <p>Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka &#34;SPN Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-3009 GHSA-qg3h-7xjj-r5g4 https://cve.radiocsirt.org/vuln/ghsa-qg3h-7xjj-r5g4 <p>Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka &#34;SPN Vulnerability.&#34;</p> <p>Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka &#34;SPN Vulnerability.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-qg3h-7xjj-r5g4 gsd-2008-3009 https://cve.radiocsirt.org/vuln/gsd-2008-3009 gsd-2008-3009 https://cve.radiocsirt.org/vuln/gsd-2008-3009