CVE-2002-0621

Currently unrated

Key Information:

Vendor
Microsoft
Status
Commerce Server
Vendor
CVE Published:
3 July 2002

Summary

Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.osvdb.org/5172
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/5108
vdb-entryx_refsource_BID

EPSS Score

38% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.