CVE-2010-0425 Use after free in n/a
Remote attackers can execute arbitrary code on Windows Apache servers using ISAPI modules via crafted requests that trigger use-after-free conditions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0425?
CVE-2010-0425 is a critical use after free vulnerability in Apache Http Server, published on 5 Mar 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."
Which versions are affected by CVE-2010-0425?
It affects 5 products.
Products include Apache Http Server, Broadcom Vmware Ace Management Server, Ibm Http Server, Ibm Websphere Application Server, Oracle Http Server.
How do I fix CVE-2010-0425?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2010-0425 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-0425 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Apache Http Server
Sources
Also known as GHSA-wv6c-mphw-ggxf, MINI-5jxh-grwq-3rq7.