Vulnerability in Microsoft Internet Information Server
CVE-2006-0026
Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).
EPSS: 0.889 (99.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_information_server — versions 6.0
- Microsoft Internet_information_services — versions 5.0
- N/a — versions n/a
References
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_OVAL, signature, vdb-entry)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (Patch, vdb-entry, x_refsource_BID)
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
- secure@microsoft.com (Patch, vdb-entry, x_refsource_SECTRACK)