CVE-2002-0224: Microsoft Internet Information Services

Medium severity, CVSS 5.0. EPSS: 26.7% chance of exploitation in the next 30 days.

The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.

Affected products

• Microsoft Internet Information Services: version 5.0 only
• Microsoft SQL Server: version 6.5 only; version 7.0 only; version 2000 only
• Microsoft Windows 2000: any version

Published 2002-05-16. Last modified 2026-06-16.