CVE-2010-0478

This Metasploit module exploits a stack buffer overflow in Windows Media Unicast Service (NUMS.exe) via a crafted FunnelConnect request, allowing arbitrary code execution under the NetShowServices account. It targets Windows 2000 Server with Windows Media Services 4.1.

This Metasploit module exploits a stack buffer overflow in Windows Media Unicast Service (NUMS.exe) via a crafted FunnelConnect request, allowing arbitrary code execution under the NetShowServices account. The exploit leverages SEH overwrites and precise payload placement to achieve RCE on Windows 2000 SP4.