RC RANDOM CHAOS

cve-2017-7269

1 post

Article

ScStoragePathFromUrl overflows the stack on PROPFIND

CVE-2017-7269 turns an unpatched IIS 6.0 WebDAV server into pre-auth RCE. The exploit primitive, the telemetry blind spot, and the residual exposure.