CVE-2010-1899: Microsoft Internet Information Server

Medium severity, CVSS 4.3. EPSS: 57.2% chance of exploitation in the next 30 days.

Stack consumption vulnerability in the ASP implementation in Microsoft Internet Information Services (IIS) 5.1, 6.0, 7.0, and 7.5 allows remote attackers to cause a denial of service (daemon outage) via a crafted request, related to asp.dll, aka "IIS Repeated Parameter Request Denial of Service Vulnerability."

Affected products

• Microsoft Internet Information Server: version 6.0 only
• Microsoft Internet Information Services: version 7.5 only

Published 2010-09-15. Last modified 2026-06-16.