{"id":"CVE-2002-1142","aliases":["EUVD-2002-1130","GHSA-xcxr-qvgm-gqpg"],"status":"published","title":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...","description":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.76004,"percentile":0.99533,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2002-11-29T05:00:00Z","modified":"2026-06-16T21:58:48Z","exploits":[{"source":"exploitdb","id":"EDB-19026","title":"Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)","type":"remote","platform":"windows","date":"2012-06-08","verified":true,"url":"https://www.exploit-db.com/exploits/19026"},{"source":"metasploit","id":"exploit/windows/iis/ms02_065_msadc","title":"MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow","type":"exploit","platform":"Windows","date":"2002-11-02","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/iis/ms02_065_msadc"}],"products":[{"vendor":"microsoft","product":"data_access_components"},{"vendor":"microsoft","product":"ie"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2730","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0082.html","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"]},{"url":"http://www.securityfocus.com/bid/6214","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10669","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/542081","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3573","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.cert.org/advisories/CA-2002-33.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10659","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.foundstone.com/knowledge/randd-advisories-display.html?id=337","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A294","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-1142"},{"url":"https://github.com/advisories/GHSA-xcxr-qvgm-gqpg"}],"sources":{"cve":[{"id":"CVE-2002-1142","description":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:12:16.939Z","updated_at":"2026-11-02T14:33:54.972584Z"}],"euvd":[{"id":"EUVD-2002-1130","description":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T03:12:16Z","updated_at":"2026-11-03T01:14:57.683744Z"}],"ghsa":[{"id":"GHSA-xcxr-qvgm-gqpg","title":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access...","description":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.","status":"published","published":"2022-04-30T18:20:37Z","modified":"2023-01-30T05:06:05Z","updated_at":"2026-11-02T14:47:25.356505Z"}],"nvd":[{"id":"CVE-2002-1142","description":"Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.","status":"published","published":"2002-11-29T05:00:00Z","modified":"2026-06-16T21:58:48.13Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:43.239725Z"}]}}