CVE-2002-1973

🗓️ 28 Jun 2005 04:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 66 Views🌐 WEB

CVE-2002-1973 Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2002-1973	28 Jun 200504:00	–	cvelist
Exploit DB	Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow	8 Jul 200200:00	–	exploitdb
NVD	CVE-2002-1973	31 Dec 200205:00	–	nvd

NVD

Node

microsoft foundation_class_libraryMatch7.0

working_resources_inc.badblueMatchpersonal_1.7.3

Source	Link
support	www.support.microsoft.com/default.aspx
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0135.html
support	www.support.microsoft.com/default.aspx
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0145.html
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0144.html
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0082.html
securityfocus	www.securityfocus.com/bid/5188
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/9529

Parameter	Position	Path	Description	CWE
path	path	/ext.dll	ISAPI heap overflow in MFC ISAPI extension via oversized request (long path/query) used to trigger crash/possible code execution.	CWE-119
query string	path	/ext.dll	ISAPI heap overflow in MFC ISAPI extension via oversized request (long path/query) used to trigger crash/possible code execution.	CWE-119
Content-Length	path	/ext.dll	ISAPI heap overflow in MFC ISAPI extension via oversized request (long path/query) used to trigger crash/possible code execution.	CWE-119

16 Jun 2026 22:00Current

8.3High risk

Vulners AI Score8.3

CVSS 27.5

EPSS0.40046