CVE-2002-1214 Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with....
HighCVSS 7.5
EPSS 49.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2000 terminal services | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20020926 Microsoft PPTP Server and Client remote vulnerability mailing-list vendor-advisory
- win-pptp-packet-bo (10199) vdb-entry
- 5807 vdb-entry
- MS02-063 vendor-advisory