CVE ID:	CVE-2010-1256
Description:	Unspecified vulnerability in Microsoft IIS 6.0, 7.0, and 7.5, when Extended Protection for Authentication is enabled, allows remote authenticated users to execute arbitrary code via unknown vectors related to "token checking" that trigger memory corruption, aka "IIS Authentication Memory Corruption Vulnerability."
Test IDs:	1.3.6.1.4.1.25623.1.0.901120
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1256 BugTraq ID: 40573 http://www.securityfocus.com/bid/40573 Cert/CC Advisory: TA10-159B http://www.us-cert.gov/cas/techalerts/TA10-159B.html Microsoft Security Bulletin: MS10-040 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-040 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7149 XForce ISS Database: ms-iis-authentication-code-execution(58864) https://exchange.xforce.ibmcloud.com/vulnerabilities/58864