CVE-2010-1256

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 28%

probabilidade de exploração

28%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."

Produtos afetados

n/a · n/a

Referências

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-040 https://exchange.xforce.ibmcloud.com/vulnerabilities/58864 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149 http://www.securityfocus.com/bid/40573 http://www.us-cert.gov/cas/techalerts/TA10-159B.html