• DocumentCode
    1262348
  • Title

    Primitive-Chaining Exploits: A Real-World Example

  • Author

    Valasek, Chris

  • Author_Institution
    Coverity
  • Volume
    10
  • Issue
    4
  • fYear
    2012
  • Firstpage
    82
  • Lastpage
    84
  • Abstract
    Attackers can gain unauthenticated remote control of the program counter through CVE-2010-3972, a vulnerability in Microsoft´s Internet Information Services FTP 7.5. This example of primitive chaining shows that attackers can combine information about the operating system, application, and vulnerability to create a viable exploit.
  • Keywords
    Microsoft IIS FTP 7.5; computer security; exploitation primitives; primitive chaining;
  • fLanguage
    English
  • Journal_Title
    Security & Privacy, IEEE
  • Publisher
    ieee
  • ISSN
    1540-7993
  • Type

    jour

  • DOI
    10.1109/MSP.2012.105
  • Filename
    6265106