AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2002-0072

MEDIUM · CVSS 5 EPSS 53.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2002-04-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2002-0072
Severity
MEDIUM
CVSS
5
EPSS
53.29%

Original NVD Description

The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.