CVE-2002-1142: microsoft data_access_components
Vulnerability summary
CVE-2002-1142 is a high (CVSS 7.5) vulnerability in microsoft data_access_components. EPSS estimates a 76.00% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 01-09-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
76.00%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 76.00% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundMicrosoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)
Maturity: weaponized
MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow
exploit/windows/iis/ms02_065_msadc
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft3 products
- data_access_components2.1 | 2.5 | 2.6
- ie6.0:sp1
- internet_explorer5.01 | 5.01:sp1 | 5.01:sp2 | 5.5 | 5.5:sp1 | 5.5:sp2 | 6.0
1 vendor · 3 products
References
11 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2730VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-065Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3573VDB EntrySignatureX Refsource OVAL
Show all 11 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A294VDB EntrySignatureX Refsource OVAL