Unscored severity · published Nov 29, 2002
CVE-2002-1142
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows…
–
CVSS
76%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
Exploitation
Is it being used?
Exploit prediction (EPSS)76.0% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Data Access Components · Microsoft
2.1; 2.5; 2.6 · source: NVD
IE
IE · Microsoft
6.0 · source: NVD
IE
Internet Explorer · Microsoft
5.0.1; 5.0.1; 5.0.1; 5.5; 5.5; 5.5; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1142
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1142
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0082.html
Third Party Advisory
http://www.cert.org/advisories/CA-2002-33.html
www.foundstone.com
http://www.foundstone.com/knowledge/randd-advisories-display.html?id=337
US Government Resource
http://www.kb.cert.org/vuls/id/542081
www.securityfocus.com
http://www.securityfocus.com/bid/6214
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065
More from Data Access Components
9.8
CVE-2012-1891
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary…
–
CVE-2011-0027
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures,…
–
CVE-2011-0026
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components…
–
CVE-2006-5559
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5…
–
CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and…