Unrated severityNVD Advisory· Published Jun 8, 2010· Updated Jun 16, 2026
CVE-2010-1256
CVE-2010-1256
Description
Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- www.us-cert.gov/cas/techalerts/TA10-159B.htmlnvdUS Government Resource
- www.securityfocus.com/bid/40573nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-040nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/58864nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149nvd
News mentions
0No linked articles in our index yet.