Sploitus

Exploit for Windows Media Unicast Service transport information packet buffer overflow

CVE-2010-0478

saint · 2010-04-14

Exploit Code

MARKDOWN29 lines
## https://sploitus.com/exploit?id=SAINT:31E688BDDB8057F6B6EFF2351B693789
Added: 04/14/2010  
CVE: [CVE-2010-0478](<https://vulners.com/cve/CVE-2010-0478>)  


### Background

The Windows Media Unicast Service is the part of Windows Media Services which allows streaming media to be sent to a specific user. 

### Problem

A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted transport information packet to the Windows Media Unicast Service. 

### Resolution

Apply the patch found in [Microsoft Security Bulletin 10-025](<http://www.microsoft.com/technet/security/bulletin/MS10-025.mspx>). 

### References

<http://www.microsoft.com/technet/security/bulletin/MS10-025.mspx>  


### Limitations

Exploit works on Windows 2000 only. 

### Platforms

Windows 2000