CVE-2002-1142

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2002-1142

remote data services

rds

microsoft data access components

mdac

internet explorer

buffer overflow

code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.875

Percentile

98.7%

JSON

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.

Affected configurations

Nvd

Node

microsoftdata_access_componentsMatch2.1

microsoftdata_access_componentsMatch2.5

microsoftdata_access_componentsMatch2.6

microsoftieMatch6.0sp1

microsoftinternet_explorerMatch5.0.1

microsoftinternet_explorerMatch5.0.1sp1

microsoftinternet_explorerMatch5.0.1sp2

microsoftinternet_explorerMatch5.5

microsoftinternet_explorerMatch5.5sp1

microsoftinternet_explorerMatch5.5sp2

microsoftinternet_explorerMatch6.0

VendorProductVersionCPE
microsoftdata_access_components2.1cpe:2.3:a:microsoft:data_access_components:2.1:*:*:*:*:*:*:*
microsoftdata_access_components2.5cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*
microsoftdata_access_components2.6cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*
microsoftie6.0cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
microsoftinternet_explorer5.0.1cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
microsoftinternet_explorer5.0.1cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
microsoftinternet_explorer5.0.1cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*
microsoftinternet_explorer5.5cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
microsoftinternet_explorer5.5cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
microsoftinternet_explorer5.5cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	data_access_components	2.1	cpe:2.3:a:microsoft:data_access_components:2.1:::::::*
microsoft	data_access_components	2.5	cpe:2.3:a:microsoft:data_access_components:2.5:::::::*
microsoft	data_access_components	2.6	cpe:2.3:a:microsoft:data_access_components:2.6:::::::*
microsoft	ie	6.0	cpe:2.3:a:microsoft:ie:6.0:sp1::::::
microsoft	internet_explorer	5.0.1	cpe:2.3:a:microsoft:internet_explorer:5.0.1:::::::*
microsoft	internet_explorer	5.0.1	cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1::::::
microsoft	internet_explorer	5.0.1	cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2::::::
microsoft	internet_explorer	5.5	cpe:2.3:a:microsoft:internet_explorer:5.5:::::::*
microsoft	internet_explorer	5.5	cpe:2.3:a:microsoft:internet_explorer:5.5:sp1::::::
microsoft	internet_explorer	5.5	cpe:2.3:a:microsoft:internet_explorer:5.5:sp2::::::