CVE-2002-0449

CVE-2002-0449 describes a critical buffer overflow vulnerability in Talentsoft Web+ 5.0 and earlier, specifically within the webpsvc.exe component. This flaw allows unauthenticated remote attackers to execute arbitrary code by supplying an overly long argument to the webplus.exe program. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication or complex attack vectors, and leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.