{"uuid": "b8e7454c-4bb5-4ecc-8087-4d0b34aeb4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-10053", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sws_connection_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"mr.pr0n\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Simple Web Server 2.2 rc2. A remote user\\n          can send a long string data in the Connection Header to causes an overflow on the\\n          stack when function vsprintf() is used, and gain arbitrary code execution. The\\n          module has been tested successfully on Windows 7 SP1 and Windows XP SP3.\", \"disclosure_date\": \"2012-07-20\", \"fullname\": \"exploit/windows/http/sws_connection_bof\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Simple Web Server Connection Header Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/sws_connection_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/http/sws_connection_bof\", \"references\": [\"CVE-2012-10053\", \"OSVDB-84310\", \"EDB-19937\", \"URL-http://ghostinthelab.wordpress.com/2012/07/19/simplewebserver-2-2-rc2-remote-buffer-overflow-exploit/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"SimpleWebServer 2.2-rc2 / Windows XP SP3 / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:00.536871Z"}