CVE-2008-0086 in Microsoft SQL Server
Summary
Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/03/2008
Disclosure
07/08/2008
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3780 | Microsoft SQL Server Query Type Conversion memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2008-0086 |