CVE

Id
43840  
CVE No.
CVE-2010-1256  
Status
Candidate  
Description
Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."  
Phase
Assigned (20100405)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
477617 43840 CVE-2010-1256 MS:MS10-040  View
477618 43840 CVE-2010-1256 URL:http://www.microsoft.com/technet/security/bulletin/ms10-040.mspx  View
477619 43840 CVE-2010-1256 CERT:TA10-159B  View
477620 43840 CVE-2010-1256 URL:http://www.us-cert.gov/cas/techalerts/TA10-159B.html  View
477621 43840 CVE-2010-1256 BID:40573  View
477622 43840 CVE-2010-1256 URL:http://www.securityfocus.com/bid/40573  View
477623 43840 CVE-2010-1256 OVAL:oval:org.mitre.oval:def:7149  View
477624 43840 CVE-2010-1256 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7149  View
477625 43840 CVE-2010-1256 XF:ms-iis-authentication-code-execution(58864)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35809 JVNDB-2010-001589 Microsoft Internet Explorer における任意のコードを実行される脆弱性 Microsoft Internet Explorer の IE8 Developer Toolbar には、適切に初期化されていない、または削除されたオブジェクトにアクセスできるため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1260 43840 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001589.html  View