Search for vulnerabilities
Vulnerability details: VCID-sfpu-wh3p-6ffv
Vulnerability ID VCID-sfpu-wh3p-6ffv
Aliases CVE-2010-0425
Summary A flaw was found with within mod_isapi which would attempt to unload the ISAPI dll when it encountered various error states. This could leave the callbacks in an undefined state and result in a segfault. On Windows platforms using mod_isapi, a remote attacker could send a malicious request to trigger this issue, and as win32 MPM runs only one process, this would result in a denial of service, and potentially allow arbitrary code execution.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.85461 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
epss 0.87454 https://api.first.org/data/v1/epss?cve=CVE-2010-0425
apache_httpd important https://httpd.apache.org/security/json/CVE-2010-0425.json
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2010-0425
CVE-2010-0425 https://httpd.apache.org/security/json/CVE-2010-0425.json
CVE-2010-0425;OSVDB-62674 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/11650.c
CVE-2010-0425;OSVDB-62674 Exploit http://www.senseofsecurity.com.au/advisories/SOS-10-002
Data source Metasploit
Description This module triggers a use-after-free vulnerability in the Apache Software Foundation mod_isapi extension for versions 2.2.14 and earlier. In order to reach the vulnerable code, the target server must have an ISAPI module installed and configured. By making a request that terminates abnormally (either an aborted TCP connection or an unsatisfied chunked request), mod_isapi will unload the ISAPI extension. Later, if another request comes for that ISAPI module, previously obtained pointers will be used resulting in an access violation or potentially arbitrary code execution. Although arbitrary code execution is theoretically possible, a real-world method of invoking this consequence has not been proven. In order to do so, one would need to find a situation where a particular ISAPI module loads at an image base address that can be re-allocated by a remote attacker. Limited success was encountered using two separate ISAPI modules. In this scenario, a second ISAPI module was loaded into the same memory area as the previously unloaded module.
Note 
Stability:
  - crash-service-down
SideEffects: []
Reliability: []
Ransomware campaign use Unknown
Source publication date March 5, 2010
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/apache_mod_isapi.rb
Data source Exploit-DB
Date added March 6, 2010
Description Apache 2.2.14 mod_isapi - Dangling Pointer Remote SYSTEM
Ransomware campaign use Known
Source publication date March 7, 2010
Exploit type remote
Platform windows
Source update date Jan. 31, 2017
Source URL http://www.senseofsecurity.com.au/advisories/SOS-10-002
Exploit Prediction Scoring System (EPSS)
Percentile 0.99336
EPSS Score 0.85461
Published At Aug. 3, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:28:51.996355+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2010-0425.json 37.0.0