Heap-Based Buffer Overflow in Microsoft FTP Service for IIS 7.0 and 7.5
CVE-2010-3972

Currently unrated

Key Information:

Vendor

Microsoft
Status
Internet Information Services
Vendor
CVE Published:
23 December 2010

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 91%

What is CVE-2010-3972?

A heap-based buffer overflow vulnerability exists in the TELNET_STREAM_CONTEXT::OnSendData function within the ftpsvc.dll of Microsoft FTP Service for Internet Information Services (IIS) 7.0 and 7.5. This vulnerability can be exploited by remote attackers to execute arbitrary code or trigger a denial of service through specially crafted FTP commands. Successful exploitation may lead to a system crash or unauthorized access to system resources, making it imperative for users of affected versions to apply updates and follow security best practices.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-3972 - Proof of Concept

References

http://www.securityfocus.com/bid/45542
vdb-entryx_refsource_BID
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
https://exchange.xforce.ibmcloud.com/vulnerabilities/64248
vdb-entryx_refsource_XF

EPSS Score

91% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.