Heap-Based Buffer Overflow in Microsoft FTP Service for IIS 7.0 and 7.5
CVE-2010-3972

Currently unrated

Key Information:

Vendor: Microsoft
Status: Internet Information Services
Vendor: CVE Published:; 23 December 2010

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 91%

What is CVE-2010-3972?

A heap-based buffer overflow vulnerability exists in the TELNET_STREAM_CONTEXT::OnSendData function within the ftpsvc.dll of Microsoft FTP Service for Internet Information Services (IIS) 7.0 and 7.5. This vulnerability can be exploited by remote attackers to execute arbitrary code or trigger a denial of service through specially crafted FTP commands. Successful exploitation may lead to a system crash or unauthorized access to system resources, making it imperative for users of affected versions to apply updates and follow security best practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-3972 - Proof of Concept