CVE-2002-1142

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...

7.5 HighPublic exploit

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.

Exploit likelihood

76.0%Down 11.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2002-1142
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2002-1142
Updated: 2026-11-02

EUVDEUVD-2002-1130 No score

Record: EUVD-2002-1130
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xcxr-qvgm-gqpg No score

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...

Record: GHSA-xcxr-qvgm-gqpg
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)	2012-06-08
Metasploit	MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow	2002-11-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1142 is a high vulnerability (CVSS 7.5) in Microsoft Data Access Components, published November 29, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.0%, the 99th percentile. No source names a fixed version.

References

Show 7 moreShow less