CVE-2002-0621 Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSyste...
MediumCVSS 5.0
EPSS 16.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft commerce server | = 2000 | No fix listed |
| Microsoft commerce server | = 2000-sp1 | No fix listed |
| Microsoft commerce server | = 2000-sp2 | No fix listed |
References
- mscs-owc-installer-bo(9424) vdb-entry
- 5172 vdb-entry
- 5108 vdb-entry
- MS02-033 vendor-advisory