CVE-2010-0478

Related Files

Windows Media Services ConnectFunnel Stack Buffer Overflow

Posted Apr 19, 2010

Authored by jduck | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in the Windows Media Unicast Service version 4.1.0.3930 (NUMS.exe). By sending a specially crafted FunnelConnect request, an attacker can execute arbitrary code under the "NetShowServices" user account. Windows Media Services 4.1 ships with Windows 2000 Server, but is not installed by default. NOTE: This service does NOT restart automatically. Successful, as well as unsuccessful exploitation attempts will kill the service which prevents additional attempts.

tags | exploit, overflow, arbitrary

systems | windows

advisories | CVE-2010-0478

SHA-256 | 4b384496a9fedaf168ba74cf8d8925d3e9590dc5accf8891f160d2def02e74d1

Download | Favorite | View

Microsoft Windows Media Services MMS Buffer Overflow

Posted Apr 15, 2010

Authored by Fabien Perigaud | Site lexsi.com

Cert-Lexsi discovered a critical vulnerability in Windows Media Services 4.1. The vulnerability is a stack-based buffer overflow when handling a specially crafted MMS TRANSPORT_INFO packet. It could be exploited to execute arbitrary code with NetShowServices privileges (which belongs to the Administrators group).

tags | advisory, overflow, arbitrary

systems | windows

advisories | CVE-2010-0478

SHA-256 | 6c6934ecec3aa784faf405de8dc5970d7a01d8d3b72f94d3ab7f14b371036d0e

Download | Favorite | View