CVE-2002-0620

medium · 5

Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.

CVSS

12.2%

EPSS (exploit prob.)

96th

EPSS percentile

2002-07-03

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
microsoft	commerce_server	2000
microsoft	commerce_server	2000
microsoft	commerce_server	2000

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/4853
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033
http://www.securityfocus.com/bid/4853
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-0620