CVE-2002-0620
Microsoft Commerce Server 2000 - Buffer Overflow via Profile Service Input Field
Title source: llmDescription
Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4853
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033
Scores
EPSS
0.1221
EPSS Percentile
95.8%
Details
Status
published
Products (1)
microsoft/commerce_server
2000 (3 CPE variants)
Published
Jul 03, 2002
Tracked Since
Feb 18, 2026