Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Internet Information Services Integer Overflow or Wraparound Vulnerability - CVE-2008-1446 - Vulnerability Database
Internet Information Services

Internet Information Services Integer Overflow or Wraparound Vulnerability - CVE-2008-1446

Critical
Reference: CVE-2008-1446
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-1446
Title: Internet Information Services Integer Overflow or Wraparound Vulnerability
Overview:

Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4 XP SP2 and SP3 Server 2003 SP1 and SP2 and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker aka quotInteger Overflow in IPP Service Vulnerability.quot