← Back to CVEs
CVE-2002-0364
N/ADescription
Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."
CVE Details
CVSS v3.1 ScoreN/A
Published7/3/2002
Last Modified4/16/2026
Sourcenvd
Honeypot Sightings0
Affected Products
microsoft:internet_information_servermicrosoft:internet_information_services
References
http://marc.info/?l=bugtraq&m=102392069305962&w=2(cve@mitre.org)
http://marc.info/?l=ntbugtraq&m=102392308608100&w=2(cve@mitre.org)
http://online.securityfocus.com/archive/1/276767(cve@mitre.org)
http://www.iss.net/security_center/static/9327.php(cve@mitre.org)
http://www.kb.cert.org/vuls/id/313819(cve@mitre.org)
http://www.securityfocus.com/bid/4855(cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182(cve@mitre.org)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29(cve@mitre.org)
http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html(af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=102392069305962&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=ntbugtraq&m=102392308608100&w=2(af854a3a-2127-422b-91ae-364da2661108)
http://online.securityfocus.com/archive/1/276767(af854a3a-2127-422b-91ae-364da2661108)
http://www.iss.net/security_center/static/9327.php(af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/313819(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/4855(af854a3a-2127-422b-91ae-364da2661108)
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-028(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182(af854a3a-2127-422b-91ae-364da2661108)
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.