Microsoft SQL Server Native Client Remote Code Execution Vulnerability (CNVD-2025-02465)

🗓️ 15 Nov 2024 00:00:00Reported by China National Vulnerability DatabaseType

Remote code execution vulnerability in Microsoft SQL Server Native Client allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the Native Client component of the Microsoft SQL Server database management system allows a hacker to execute arbitrary code.	22 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-49007	12 Nov 202418:26	–	circl
CNNVD	Microsoft SQL Server 安全漏洞	12 Nov 202400:00	–	cnnvd
CVE	CVE-2024-49007	12 Nov 202417:54	–	cve
Cvelist	CVE-2024-49007 SQL Server Native Client Remote Code Execution Vulnerability	12 Nov 202417:54	–	cvelist
EUVD	EUVD-2024-43884	3 Oct 202520:07	–	euvd
Microsoft KB	KB5046855 - Description of the security update for SQL Server 2016 SP3 GDR: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046856 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046857 - Description of the security update for SQL Server 2017 GDR: November 12, 2024	12 Nov 202408:00	–	mskb
Microsoft KB	KB5046858 - Description of the security update for SQL Server 2017 CU31: November 12, 2024	12 Nov 202408:00	–	mskb