Description
Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0 before SP3, as used in multiple products including BadBlue, allows remote attackers to cause a denial of service (access violation and crash) and possibly execute arbitrary code via a long query string that causes a parsing error.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Foundation Class Library 7.0 - ISAPI Buffer Overflow EDB-21601 · remote · Jul 8, 2002 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20020708 ALERT: Working Resources BadBlue #2 (DoS, Heap Overflow) mailing-list
- 216562 vendor-advisory
- mfc-lib-isapi-bo(9529) vdb-entry
- 5188 vdb-entry
- 20020712 MFC Overflow Test Code mailing-list
- 310649 vendor-advisory
- 20020711 MFC ISAPI Framework Buffer Overflow mailing-list
- 20020712 Re: MFC ISAPI Framework Buffer Overflow mailing-list