CVE-2002-1973

Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual…

published June 28, 2005

CVSS
—
EPSS
40%
Percentile
98.6
In the wild
Unconfirmed
What it is

Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.40046 · 98.6th percentile
Published
2005-06-28T04:00Z
EPSS history
Timeline
  • 28 JUN 04:00Z
    Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual…
    cvelistv5