CVE-2010-1937
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow...
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
- Record
CVE-2010-1937- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
- Record
CVE-2010-1937- Updated
- 2026-11-02
EUVDEUVD-2010-1956 No score
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
- Record
EUVD-2010-1956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-93xv-c79w-9v73 No score
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow...
Heap-based buffer overflow in httpAdapter.c in httpAdapter in SBLIM SFCB before 1.3.8 might allow remote attackers to execute arbitrary code via a Content-Length HTTP header that specifies a value too small for the amount of POST data, aka bug #3001896.
- Record
GHSA-93xv-c79w-9v73- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1937 is a high vulnerability (CVSS 10.0) in Standards Based Linux Instrumentation Sblim-sfcb, published June 14, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.82%, the 93rd percentile. No source names a fixed version.
References
sblim.cvs.sourceforge.net/viewvc/sblim/sfcb/httpAdapter.c?r1=1.84&r2=1.85
sourceforge.net/tracker/index.php?func=detail&aid=3001896&group_id=128809&atid=712784
secunia.com/advisories/40018
vupen.com/english/advisories/2010/1312
marc.info?l=bugtraq&m=127549079109192&w=2
nvd.nist.gov/vuln/detail/CVE-2010-1937
github.com/advisories/GHSA-93xv-c79w-9v73