Lucene search
HistorySep 11, 2007 - 7:17 p.m.
CVE-2007-4814
cve-2007-4814
buffer overflow
sqlserver
activex control
remote code execution
nvd
microsoft sql server enterprise manager
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.685 Medium
EPSS
Percentile
98.0%
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
Affected configurations
Node
microsoftsql_serverMatch2005sp2
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:sql_server | microsoft sql server | eq | 2005 |
References
Related
cvelist
cvelist
CVE-2007-4814
2007-09-11 19:00:00
saint
saint
Microsoft SQL Server Distributed Management Objects buffer overflow
2007-10-11 00:00:00
Microsoft SQL Server Distributed Management Objects buffer overflow
2007-10-11 00:00:00
Microsoft SQL Server Distributed Management Objects buffer overflow
2007-10-11 00:00:00
nvd
nvd
CVE-2007-4814
2007-09-11 19:17:00
prion
prion
Buffer overflow
2007-09-11 19:17:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.685 Medium
EPSS
Percentile
98.0%
Related for CVE-2007-4814