CVE-1999-0874
Microsoft Internet Information Server - Memory Corruption
Title source: ruleDescription
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
Exploits (6)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16468
exploitdb
WORKING POC
VERIFIED
by Greg Hoglund · cremotewindows
https://www.exploit-db.com/exploits/19248
exploitdb
WORKING POC
VERIFIED
by eEye Digital Security Team · perlremotewindows
https://www.exploit-db.com/exploits/19245
exploitdb
WORKING POC
VERIFIED
by eeye security · cremotelinux
https://www.exploit-db.com/exploits/19247
metasploit
WORKING POC
GOOD
by stinko · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/iis/ms02_018_htr.rb
References (5)
Scores
EPSS
0.8447
EPSS Percentile
99.3%
Details
CWE
CWE-119
Status
published
Products (4)
microsoft/internet_information_server
4.0
microsoft/windows_2000
microsoft/windows_nt
microsoft/windows_nt
4.0
Published
Jun 16, 1999
Tracked Since
Feb 18, 2026