CVE-2002-1142: Microsoft Data Access Components

High severity, CVSS 7.5. EPSS: 76% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.

Affected products

• Microsoft Data Access Components: version 2.1 only; version 2.5 only; version 2.6 only
• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only

Published 2002-11-29. Last modified 2026-06-16.