CVE-2002-0692 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Frontpage Server Extensions

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
37.8%
top 2.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Frontpage Server Extensions
Timeline
PublishedOct 10
Latest updateApr 30

Description

Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmicrosoft/frontpage2000, 2002+1

🔴Vulnerability Details

2
GHSA
GHSA-2vgc-gm64-jwcg: Buffer overflow in SmartHTML Interpreter (shtml↗2022-04-30
▶
CVEList
CVE-2002-0692: Buffer overflow in SmartHTML Interpreter (shtml↗2004-09-01
▶