Skip to content

CVE-2002-0859

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000...

7.5 HighPublic exploit

CVE-2002-0859 is a high vulnerability (CVSS 7.5) in Microsoft Jet, published September 5, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.2%, the 97th percentile. No source names a fixed version.

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Exploit likelihood

26.2%Down 16.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Record: CVE-2002-0859
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Record: CVE-2002-0859
Updated: 2026-11-02

EUVDEUVD-2002-0851 No score

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Record: EUVD-2002-0851
Updated: 2026-11-03

GitHub AdvisoriesGHSA-75vw-vxph-j655 No score

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000...

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Record: GHSA-75vw-vxph-j655
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Microsoft SQL Server 2000 / Microsoft Jet 4.0 Engine - Unicode Buffer Overflow (PoC)	2002-06-19

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References