CVE-2002-1973 Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in mul...
HighCVSS 7.5
EPSS 40.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft foundation class library | = 7.0 | No fix listed |
| working resources inc badblue | = personal_1.7.3 | No fix listed |
References
- 20020708 ALERT: Working Resources BadBlue #2 (DoS, Heap Overflow) mailing-list
- 20020711 MFC ISAPI Framework Buffer Overflow exploit mailing-list
- 20020712 Re: MFC ISAPI Framework Buffer Overflow mailing-list
- 20020712 MFC Overflow Test Code mailing-list patch
- 216562 vendor-advisory
- 310649 vendor-advisory
- 5188 exploit vdb-entry
- mfc-lib-isapi-bo(9529) vdb-entry