Vulnerability in Microsoft Data Access Components
CVE-2002-1142
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
EPSS: 0.760 (99.5th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Data_access_components — versions 2.1, 2.5, 2.6
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 5.0.1, 5.5, 6.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)
Frequently asked questions
- What is CVE-2002-1142?
- CVE-2002-1142 is a vulnerability in Microsoft Data Access Components. Published 2002-11-29.
- Is CVE-2002-1142 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.