VULNERABILITY INTELLIGENCE
CVE-2008-5828
CVSS score5 MEDIUM
EPSS probability14.30%
CISA KEVNot currently listed
Published2009-01-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor