Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026
CVE-2002-1973
CVE-2002-1973
Description
Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:microsoft:foundation_class_library:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:working_resources_inc.:badblue:personal_1.7.3:*:*:*:*:*:*:*
- Range: 5.0, 6.0 before SP3
Patches
Vulnerability mechanics
References
8- archives.neohapsis.com/archives/bugtraq/2002-07/0145.htmlnvdPatch
- archives.neohapsis.com/archives/bugtraq/2002-07/0135.htmlnvdExploit
- www.securityfocus.com/bid/5188nvdExploit
- archives.neohapsis.com/archives/bugtraq/2002-07/0082.htmlnvd
- archives.neohapsis.com/archives/bugtraq/2002-07/0144.htmlnvd
- support.microsoft.com/default.aspxnvd
- support.microsoft.com/default.aspxnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/9529nvd
News mentions
0No linked articles in our index yet.