CVE-2002-1142 Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to ex...
HighCVSS 7.5
EPSS 76.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data access components | = 2.1 | No fix listed |
| Microsoft data access components | = 2.5 | No fix listed |
| Microsoft data access components | = 2.6 | No fix listed |
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp2 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 5.5-sp1 | No fix listed |
| Microsoft internet explorer | = 5.5-sp2 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20021120 Foundstone Advisory mailing-list
- CA-2002-33 third-party-advisory us-government-resource
- www.foundstone.com
- VU#542081 third-party-advisory us-government-resource
- 6214 vdb-entry
- MS02-065 vendor-advisory
- mdac-rds-server-bo(10659) vdb-entry
- mdac-rds-client-bo(10669) vdb-entry
- oval:org.mitre.oval:def:2730 signature vdb-entry
- oval:org.mitre.oval:def:294 signature vdb-entry
- oval:org.mitre.oval:def:3573 signature vdb-entry