How severe is CVE-2002-0050?

CVE-2002-0050 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2002-0050 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0050?

CVE-2002-0050 affects Microsoft Commerce Server. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2002-0050?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2002-0050 published?

CVE-2002-0050 was published on 2002-03-08 and last updated on 2026-06-16.

CVE-2002-0050

CVE-2002-0050 is a high-severity vulnerability in Microsoft Commerce Server with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 13% places it in the 96th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 13% (96th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Commerce Server
Published: 2002-03-08
Last modified: 2026-06-16

Description

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.

Frequently asked questions

What is CVE-2002-0050?: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
How severe is CVE-2002-0050?: CVE-2002-0050 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2002-0050 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 13% (96th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0050?: CVE-2002-0050 affects Microsoft Commerce Server. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-0050?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2002-0050 published?: CVE-2002-0050 was published on 2002-03-08 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:microsoft:commerce_server:2000:*:*:*:*:*:*:*

More vulnerabilities in Microsoft Commerce Server

CVE-2007-1201 — Critical (CVSS 9.3): Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote…
CVE-2012-1856 — High (CVSS 8.8): The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web…
CVE-2012-0158 — High (CVSS 8.8): The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common…
CVE-2006-1257 — High (CVSS 7.5): The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to…
CVE-2002-0623 — High (CVSS 7.5): Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to…
CVE-2002-0622 — High (CVSS 7.5): The Office Web Components (OWC) package installer for Microsoft Commerce Server 2000 allows remote attackers to execute…

All CVEs affecting Microsoft Commerce Server →