• info
• discussion
• exploit
• solution
• references

Microsoft WinHTTP Integer Underflow Memory Corruption Remote Code Execution Vulnerability

The following commercial exploit is available for Immunity CANVAS. This exploit is not otherwise publicly available or known to circulating in the wild:

https://www.immunityinc.com/downloads/immpartners/ms09_013.tgz

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.