CVEvulnerability
CVE-2002-0621
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
Affected configurations
• microsoft commerce server 2000
References
- http://www.iss.net/security_center/static/9424.php www.iss.net
- http://www.osvdb.org/5172 www.osvdb.org
- http://www.securityfocus.com/bid/5108 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033 docs.microsoft.com
- http://www.iss.net/security_center/static/9424.php www.iss.net
- http://www.osvdb.org/5172 www.osvdb.org
- http://www.securityfocus.com/bid/5108 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033 docs.microsoft.com