Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Windows Media Player 6.4, Windows Media Format Runtime 7.1 through 11, and Windows Media Services 4.1, 9, and 2008 do not properly use the Service Principal Name (SPN) identifier when validating replies to authentication requests, which allows remote servers to execute arbitrary code via vectors that employ NTLM credential reflection, aka "SPN Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows SPN实现远程代码执行漏洞
Vulnerability Description
Windows媒体组件包括Windows Media Player、Windows Media Format Runtime和Windows Media Services等多种服务和应用。 请注意Windows Media媒体组件是区分区域的，也就是说在从服务器检索媒体时，要判断服务器是处于本地Intranet区还是Internet区。处于Internet区中的服务器是不受信任的，未经提示用户Windows媒体组件不会向该区中的服务器发送NTLM凭据。因此，如果要利用SPN漏洞，攻击者必须处于本地Intr
CVSS Information
N/A
Vulnerability Type
N/A