Vulnerability in Microsoft Internet Information Services
CVE-2002-0224
The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
EPSS: 0.165 (96.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_information_services — versions 5.0
- Microsoft Sql_server — versions 6.5, 7.0, 2000
- Microsoft Windows_2000
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2002-0224?
- CVE-2002-0224 is a vulnerability in Microsoft Internet Information Services. Published 2002-05-16.
- Is CVE-2002-0224 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.