Unrated severityNVD Advisory· Published Jul 3, 2002· Updated Apr 16, 2026

CVE-2002-0621

Description

Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.

Affected products

Microsoft/Commerce Server3 versions
cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:commerce_server:2000:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:commerce_server:2000:sp2:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.iss.net/security_center/static/9424.phpnvd
www.osvdb.org/5172nvd
www.securityfocus.com/bid/5108nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.013
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000