Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-1256
HistoryJun 08, 2010 - 8:30 p.m.

Memory corruption

2010-06-0820:30:00
PRIOn knowledge base
www.prio-n.com
7

7.7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.089 Low

EPSS

Percentile

94.4%

Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to “token checking” that trigger memory corruption, aka “IIS Authentication Memory Corruption Vulnerability.”

CPENameOperatorVersion
internet_information_servereq6.0

7.7 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.089 Low

EPSS

Percentile

94.4%

Related for PRION:CVE-2010-1256