Lucene search

K
cve[email protected]CVE-2010-2730
HistorySep 15, 2010 - 7:00 p.m.

CVE-2010-2730

2010-09-1519:00:00
CWE-119
web.nvd.nist.gov
1518
2
cve-2010-2730
microsoft
iis
buffer overflow
remote code execution
fastcgi
vulnerability

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.283 Low

EPSS

Percentile

96.8%

Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka “Request Header Buffer Overflow Vulnerability.”

Social References

More

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.283 Low

EPSS

Percentile

96.8%