CVE-2002-1142
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...
CVE-2002-1142 is a high vulnerability (CVSS 7.5) in Microsoft Data Access Components, published November 29, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 76.0%, the 99th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 76.0%EPSS, 99th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
Exploit likelihood
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow | 2002-11-02 |
| Exploit-DB | Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit) | 2012-06-08 |
What each source reports
NVD Score used
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
- Record
CVE-2002-1142- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
- Record
CVE-2002-1142- Updated
- 2026-11-02
EUVDEUVD-2002-1130No score
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
- Record
EUVD-2002-1130- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xcxr-qvgm-gqpgNo score
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
- Record
GHSA-xcxr-qvgm-gqpg- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2730
archives.neohapsis.com/archives/vulnwatch/2002-q4/0082.html
securityfocus.com/bid/6214
exchange.xforce.ibmcloud.com/vulnerabilities/10669
kb.cert.org/vuls/id/542081
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065
Show 7 moreShow less
cert.org/advisories/CA-2002-33.html
foundstone.com/knowledge/randd-advisories-display.html?id=337
nvd.nist.gov/vuln/detail/CVE-2002-1142
github.com/advisories/GHSA-xcxr-qvgm-gqpg