CVE-2002-1973

🗓️ 28 Jun 2005 04:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 70 Views🌐 WEB

CVE-2002-1973 Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2002-1973	28 Jun 200504:00	–	cvelist
Exploit DB	Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow	8 Jul 200200:00	–	exploitdb
NVD	CVE-2002-1973	31 Dec 200205:00	–	nvd
Rapid7 Vulnerability Database (full)	CVE-2002-1973: Undefined Security Weakness	28 Jun 200500:00	–	rapid7

NVD

Node

microsoft foundation_class_libraryMatch7.0

working_resources_inc.badblueMatchpersonal_1.7.3

Source	Link
support	www.support.microsoft.com/default.aspx
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0135.html
support	www.support.microsoft.com/default.aspx
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0145.html
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0144.html
archives	www.archives.neohapsis.com/archives/bugtraq/2002-07/0082.html
securityfocus	www.securityfocus.com/bid/5188
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/9529

Parameter	Position	Path	Description	CWE
query_string	query param	/ext.dll	Buffer overflow in MFC ISAPI extension OnParseError via long query string causing parsing error; remote DoS and possible code execution.
query_string	query param	/iisstart.asp	Buffer overflow in MFC ISAPI extension OnParseError via long query string causing parsing error; remote DoS and possible code execution.

16 Jun 2026 22:00Current

8.3High risk

Vulners AI Score8.3

CVSS 27.5

EPSS0.40046