cbcvebase.
CVE-2010-2730
published 2010-09-15

CVE-2010-2730: Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted…

PriorityP260critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
32.83%
98.2th percentile
Buffer overflow in Microsoft Internet Information Services (IIS) 7.5, when FastCGI is enabled, allows remote attackers to execute arbitrary code via crafted headers in a request, aka "Request Header Buffer Overflow Vulnerability."

Affected

1 ranges
VendorProductVersion rangeFixed in
microsoftinternet_information_services——

Detection & IOCsextracted from sources · hover to see the quote

  • →IIS 7.5 servers with FastCGI enabled are vulnerable to remote code execution via crafted HTTP request headers (CVE-2010-2730); use Nessus Plugin ID 49223 for credentialed detection ↗
  • ·The vulnerability is only exploitable when FastCGI is enabled on IIS 7.5; systems without FastCGI enabled are not affected by this specific RCE vector ↗
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.