Microsoft Internet Information Services vulnerabilities
91 published vulnerabilities in Microsoft Internet Information Services, 1 of them exploited in the wild. The most were published in 2002 (27), and 1 so far in 2017.
Microsoft Internet Information Services vulnerabilities by year
1999
2000
2001
2002
2003
2005
2006
2007
2008
2009
2010
2011
2014
2017
Most exploited Microsoft Internet Information Services vulnerabilities
- CVE-2017-7269 Microsoft Windows Server Buffer Overflow
- CVE-2010-3972 Memory corruption in n/a
- CVE-2008-4301 Other in n/a
- CVE-2007-2815 The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL
- CVE-2003-0224 Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web pa
- CVE-1999-0233 IIS 1.0 allows users to execute arbitrary commands using .bat or .cmd files.
- CVE-2010-2730 Memory corruption in n/a
- CVE-2008-1446 Integer overflow in n/a
- CVE-2005-4360 The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitr
- CVE-2009-1122 The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows re
- CVE-2009-1535 Auth bypass in n/a
- CVE-2003-1567 The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body o
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.