What is CVE-2002-1214?

CVE-2002-1214 is a vulnerability in Microsoft Windows_2000. Published 2002-10-28.

Is CVE-2002-1214 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Windows_2000

CVE-2002-1214

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.

EPSS: 0.508 (98.8th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_2000
Microsoft Windows_2000_terminal_services
Microsoft Windows_xp
N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework
ARPSyndicate/cvemon
nitishbadole/oscp-note-2
rmsbpro/rmsbpro

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MS, vendor-advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2002-1214?: CVE-2002-1214 is a vulnerability in Microsoft Windows_2000. Published 2002-10-28.
Is CVE-2002-1214 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.