Vulnerability
CVE-2002-0147
HIGH 7.5
CVE-2002-0147 is a high-severity vulnerability (CVSS v2 7.5). As of 2026-10-28, 372 hosts in our data show software it affects on an open service in at least 15 countries.
Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
- Published
- 2002-04-22
- Last modified
- 2026-06-16
- CVSS score
- 7.5 CVSS v2
- CVSS vector (v2)
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- Exploit likelihood (EPSS)
- 68.0% in the next 30 days (top 0.7% of CVEs)
Exposure in our data
372 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 1 host with this CVE only from an older observation.
5 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-28 04:20 UTC
By country
| United States US | 110 |
| South Korea KR | 84 |
| Spain ES | 30 |
| Italy IT | 28 |
| Germany DE | 17 |
| Taiwan TW | 16 |
| Sweden SE | 11 |
| Japan JP | 10 |
| Austria AT | 6 |
| Russia RU | 6 |
| Bulgaria BG | 5 |
| Poland PL | 5 |
| Switzerland CH | 4 |
| United Kingdom GB | 4 |
| Netherlands NL | 4 |
Affected software seen
| internet_information_services 5.0 | 372 |