$ cve CVE-2002-0079 JSON

CVE-2002-0079 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 77.3% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	77.34% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2002-04-22
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	internet information server
microsoft	internet information services

Public exploits

Source	Title	Date
exploit-db	Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (4)	2002-04-24
exploit-db	Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (2)	2002-04-14
exploit-db	Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (1)	2002-04-10
exploit-db	Microsoft IIS 4.0/5.0 - Chunked Encoding Transfer Heap Overflow (3)	2002-04-10

References

→ the Explorer · watch your stack · NVD