CVE-2010-1899

Medium

Description

Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

SeverityMedium
CVSS4.3
Exploit probability—
ProductMicrosoft Internet Information Server
PublishedSep 15, 2010
First seenSep 15, 2010

How to fix

Affected products

ProductAffected versionsFixed in
microsoft internet_information_server6.0—
microsoft internet_information_services7.5—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2010-1899 · Microsoft Internet Information Server · Dark Radar