CVE-2010-3972

critical Microsoft
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
91.7%
Exploitation probability in 30 days
Top 0% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: December 23, 2010 (5621 days ago)
Last Modified: April 29, 2026
Vendor: Microsoft
Source: NVD

Description

Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) 7.0, and IIS 7.5, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted FTP command, aka "IIS FTP Service Heap Buffer Overrun Vulnerability." NOTE: some of these details are obtained from third party information.

CWE

CWE-119

Affected Products

microsoft internet information services

References

🔗 blogs.technet.com 🔗 secunia.com 🔗 www.exploit-db.com 🔗 www.kb.cert.org 🔗 www.securityfocus.com