CVE-2010-0478
Windows 2000 Server SP4 - Remote Code Execution via Crafted Transport Packets
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-0478.
PoCs published by Metasploit, including Metasploit module exploits/windows/mmsp/ms10_025_wmss_connect_funnel.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Windows Media Unicast Service (NUMS.exe) via a crafted FunnelConnect request, allowing arbitrary code execution under the NetShowServices account. It targets Windows 2000 Server with Windows Media Services 4.1.
Description
Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka "Media Services Stack-based Buffer Overflow Vulnerability."
Exploits (2)
This Metasploit module exploits a stack buffer overflow in Windows Media Unicast Service (NUMS.exe) via a crafted FunnelConnect request, allowing arbitrary code execution under the NetShowServices account. It targets Windows 2000 Server with Windows Media Services 4.1.
This Metasploit module exploits a stack buffer overflow in Windows Media Unicast Service (NUMS.exe) via a crafted FunnelConnect request, allowing arbitrary code execution under the NetShowServices account. The exploit leverages SEH overwrites and precise payload placement to achieve RCE on Windows 2000 SP4.