CVE-2010-0425: Critical severity apache http server vulnerability
modules/arch/win32/modisapi.c in modisapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapiunload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0425?
CVE-2010-0425 is classified as a significant vulnerability that can lead to arbitrary code execution on vulnerable systems.
How do I fix CVE-2010-0425?
To fix CVE-2010-0425, upgrade Apache HTTP Server to version 2.3.7 or later.
Which versions of Apache HTTP Server are affected by CVE-2010-0425?
CVE-2010-0425 affects Apache HTTP Server versions 2.0.37 through 2.0.63, and 2.2.0 through 2.2.14.
What type of systems are primarily affected by CVE-2010-0425?
CVE-2010-0425 primarily affects Apache HTTP Server running on Windows systems.
Is CVE-2010-0425 a remote attack vector?
Yes, CVE-2010-0425 allows remote attackers to exploit the vulnerability.