CVE-2002-0621

Microsoft Commerce Server 2000 - Buffer Overflow in Office Web Components Package Installer

Title source: llm

Description

Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.

References (4)

Core 4

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/5172

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5108

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9424.php

Scores

EPSS 0.1692

EPSS Percentile 96.8%

Details

Status published

Products (1)

microsoft/commerce_server 2000 (3 CPE variants)

Published Jul 03, 2002

Tracked Since Feb 18, 2026