CVE-2010-1899

Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

57.23% chance of exploitation in the next 30 days, 99th percentile

Published

2010-09-15

Updated

2024-08-07

Proof-of-concept exploits (1)

• erickrr-bd/PoC-CVE0★ · 2026-08-05

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/http/ms10_065_ii6_a…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15167

Exploit collections (1)

• helloexp/0day/blob/master/97-Windows%E6%8F%90%E6%9D%83/MS10-065/MS10-065-KB2124261-KB2271…

References

• CVE Record
• NVD entry

Related

• CVE-2021-44228
• CVE-2023-46604
• CVE-2010-1897
• CVE-2010-1900
• CVE-2010-1894
• CVE-2010-1905