CVE-2002-1214

Microsoft PPTP Service - Buffer Overflow

Title source: llm

Description

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.

Exploits (1)

metasploit WORKING POC

by aushack · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/pptp/ms02_063_pptp_dos.rb

View Code ZIP pw:eip

References (4)

[Vendor Advisory] http://online.securityfocus.com/archive/1/293146

[Third Party Advisory] http://www.iss.net/security_center/static/10199.php

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/5807

Scores

EPSS 0.7904

EPSS Percentile 99.1%

Details

Status published

Products (3)

microsoft/windows_2000 (4 CPE variants)

microsoft/windows_2000_terminal_services (4 CPE variants)

microsoft/windows_xp (3 CPE variants)

Published Oct 28, 2002

Tracked Since Feb 18, 2026