CVE-2002-0072
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2003
- Updated
- Aug 8, 2024
- Reserved
- Feb 21, 2002
Description
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 4479vdb-entry
- VU#521059third-party-advisory
- iis-isapi-filter-error-dos(8800)vdb-entry
- 20020411 KPMG-2002009: Microsoft IIS W3SVC Denial of Servicemailing-list
- MS02-018vendor-advisory
- 3326vdb-entry
- CA-2002-09third-party-advisory
- 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.