PT-2010-2239 · Microsoft · Windows Media Services+3

Fabien Perigaud · Publicado 2010-04-14 · Atualizado 2019-04-30 · CVE-2010-0478

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 Server Service Pack 4 with Windows Media Services

Description A stack-based buffer overflow issue exists due to the way the Windows Media Unicast Service handles specially crafted transport information packets, allowing remote attackers to execute arbitrary code. This issue affects Microsoft Windows 2000 Server systems that have enabled Windows Media Services, which is an optional component and not installed by default.

Recommendations For Microsoft Windows 2000 Server Service Pack 4 with Windows Media Services, consider disabling the Windows Media Unicast Service until a patch is available to prevent exploitation. Restrict access to the Windows Media Services component to minimize the risk of remote code execution.

Exploit

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0478

Produtos afetados

Windows

Windows 2000 Server

Windows Media Services

Windows Media Unicast Service

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mmsp/ms10_025_wmss_connect_funnel.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16333 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7001 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0478 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2010-0478 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-025 · Nota