CVE-2000-1147: Microsoft Internet Information Server

Medium severity, CVSS 4.6. EPSS: 7.9% chance of exploitation in the next 30 days.

Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.

Affected products

• Microsoft Internet Information Server: version 4.0 only

Published 2001-01-09. Last modified 2026-06-16.