PT-2010-2239 · Microsoft · Windows Media Services+3

Fabien Perigaud · Published 2010-04-14 · Updated 2019-04-30 · CVE-2010-0478

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 Server Service Pack 4 with Windows Media Services

Description A stack-based buffer overflow issue exists due to the way the Windows Media Unicast Service handles specially crafted transport information packets, allowing remote attackers to execute arbitrary code. This issue affects Microsoft Windows 2000 Server systems that have enabled Windows Media Services, which is an optional component and not installed by default.

Recommendations For Microsoft Windows 2000 Server Service Pack 4 with Windows Media Services, consider disabling the Windows Media Unicast Service until a patch is available to prevent exploitation. Restrict access to the Windows Media Services component to minimize the risk of remote code execution.

Exploit

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-0478

Affected Products

Windows

Windows 2000 Server

Windows Media Services

Windows Media Unicast Service

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mmsp/ms10_025_wmss_connect_funnel.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16333 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0478 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0478 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7001 · Note
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-025 · Note