Heap-Based Buffer Overflow in Microsoft FTP Service for IIS 7.0 and 7.5
CVE-2010-3972

Currently unrated

Key Information:

Vendor

Microsoft
Status
Internet Information Services
Vendor
CVE Published:
23 December 2010

What is CVE-2010-3972?

A heap-based buffer overflow vulnerability exists in the TELNET_STREAM_CONTEXT::OnSendData function within the ftpsvc.dll of Microsoft FTP Service for Internet Information Services (IIS) 7.0 and 7.5. This vulnerability can be exploited by remote attackers to execute arbitrary code or trigger a denial of service through specially crafted FTP commands. Successful exploitation may lead to a system crash or unauthorized access to system resources, making it imperative for users of affected versions to apply updates and follow security best practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securityfocus.com/bid/45542
vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/64248
vdb-entryx_refsource_XF

EPSS Score

91% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.