CVE-2002-0224

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 26.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-05-03 · updated 2026-06-16

Description

The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.

Affected products

Microsoft IIS: 5.0
Microsoft SQL Server: 6.5, 7.0, 7.0-sp1, 7.0-sp2, 7.0-sp3, 2000 (+2)
Microsoft Windows 2000: all versions

References

http://online.securityfocus.com/archive/1/253360
http://online.securityfocus.com/archive/1/268593
http://www.iss.net/security_center/static/8046.php
http://www.securityfocus.com/bid/4006
http://online.securityfocus.com/archive/1/253360
http://online.securityfocus.com/archive/1/268593
http://www.iss.net/security_center/static/8046.php
http://www.securityfocus.com/bid/4006

Get alerted when CVE-2002-0224 or the next vulnerability affects your stack