Buffer Overflow in ASP Data Transfer of Internet Information Server by Microsoft

CVE-2002-0147

Summary

A buffer overflow vulnerability exists in the ASP data transfer mechanism of Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1. This flaw allows remote attackers to exploit the vulnerability, potentially leading to a denial of service or arbitrary code execution on affected systems. The vulnerability arises from improper handling of chunked data encoding, giving attackers the ability to craft malicious requests that can overflow the allocated buffer, causing significant disruptions or unauthorized access.

References