CVE-2004-1134
Microsoft w3who.dll - Buffer Overflow via Long Query String
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-1134.
PoCs published by Metasploit, hdm, including Metasploit module exploits/windows/isapi/w3who_query.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in the w3who.dll ISAPI application (CVE-2004-1134). It targets Windows 2000 and XP by sending a maliciously crafted query string to trigger remote code execution.
Description
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
Exploits (2)
This is a Metasploit module exploiting a stack buffer overflow in the w3who.dll ISAPI application (CVE-2004-1134). It targets Windows 2000 and XP by sending a maliciously crafted query string to trigger remote code execution.
This Metasploit module exploits a stack buffer overflow in Microsoft IIS's w3who.dll ISAPI application (CVE-2004-1134). It targets Windows 2000 and XP by sending a maliciously crafted query string to trigger remote code execution.