CVE-2005-4360

HIGH Year: 2005
CVSS v2 Score
7.8
High
Weakness Type
CWE-252
View all →

Vulnerability Description

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot).

Related Vulnerabilities

CVE-2021-40401

CRITICAL
CVSS:10.0(Critical)

A use-after-free vulnerability exists in the RS-274X aperture definition tokenization functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) and Gerbv forked 2.7.1. A specially-crafted gerber file can...

CWE-2522021

CVE-1999-0199

CRITICAL
CVSS:9.8(Critical)

manual/search.texi in the GNU C Library (aka glibc) before 2.2 lacks a statement about the unspecified tdelete return value upon deletion of a tree's root, which might allow attackers to access a dang...

CWE-2521999

CVE-2007-3798

CRITICAL
CVSS:9.8(Critical)

Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return val...

CWE-2522007

CVE-2010-0211

CRITICAL
CVSS:9.8(Critical)

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmen...

CWE-2522010

CVE-2019-15900

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitiali...

CWE-2522019

CVE-2020-6152

CRITICAL
CVSS:9.8(Critical)

A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can ...

CWE-2522020