CVE-2010-0010
15Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 43%
exploitation probability
43%top 1% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
Affected products
n/a · n/aReferences
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.htmlhttp://blog.pi3.com.pl/?p=69http://httpd.apache.org/dev/dist/CHANGES_1.3.42http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.htmlhttp://marc.info/?l=bugtraq&m=130497311408250&w=2http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txthttp://secunia.com/advisories/38319http://secunia.com/advisories/39656https://exchange.xforce.ibmcloud.com/vulnerabilities/55941http://site.pi3.com.pl/adv/mod_proxy.txthttps://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3Ehttps://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E