Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2008-0107

🗓️ 08 Jul 2008 23:00:00Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov👁 103 Views🌐 WEB

SQL Server integer underflow vulnerability in multiple versions allows remote code execution via SMB or WebDAV pathname. "SQL Server Memory Corruption Vulnerability.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Check Point Advisories		Microsoft SQL Server Backup Restoring Memory Corruption (MS08-040; CVE-2008-0107)
16 Jun 201000:00
–checkpoint_advisories
Cvelist		CVE-2008-0107
8 Jul 200823:00
–cvelist
Microsoft KB		KB941203 - MS08-040: Vulnerabilities in Microsoft SQL Server could allow elevation of privilege
20 Oct 202007:12
–mskb
NVD		CVE-2008-0107
8 Jul 200823:41
–nvd
OpenVAS		VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
16 Mar 201200:00
–openvas
OpenVAS		VMware ESXi/ESX Third party component updates (VMSA-2011-0003.2)
16 Mar 201200:00
–openvas
OpenVAS		Microsoft SQL Server Elevation of Privilege Vulnerabilities (941203)
14 Oct 200800:00
–openvas
OpenVAS		MS SQL Server Elevation of Privilege Vulnerabilities (941203)
14 Oct 200800:00
–openvas
Prion		Integer overflow
8 Jul 200823:41
–prion
securityvulns		Microsoft Security Bulletin MS08-040 – Important Vulnerabilities in Microsoft SQL Server Could Allow Elevation of Privilege (941203)
9 Jul 200800:00
–securityvulns
Rows per page
NVD
Node
microsoftdata_engineMatch1.0sp4
OR
microsoftsql_serverMatch7.0sp4
OR
microsoftsql_serverMatch2000sp4
OR
microsoftsql_serverMatch2000sp4itanium
OR
microsoftsql_serverMatch2005sp1
OR
microsoftsql_serverMatch2005sp1express
OR
microsoftsql_serverMatch2005sp1itanium
OR
microsoftsql_serverMatch2005sp1x64
OR
microsoftsql_serverMatch2005sp2
OR
microsoftsql_serverMatch2005sp2express
OR
microsoftsql_serverMatch2005sp2itanium
OR
microsoftsql_serverMatch2005sp2x64
OR
microsoftsql_server_desktop_engineMatch2000sp4
Node
microsoftwmsdeMatch2000
OR
microsoftwyukonsp2
AND
microsoftwindows_2003_serversp1
OR
microsoftwindows_2003_serversp2
Node
microsoftwmsdeMatch2000
OR
microsoftwyukonsp2x64
AND
microsoftwindows_server_2003
OR
microsoftwindows_server_2003sp2
Node
microsoftwyukonsp2
OR
microsoftwyukonsp2x64
AND
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
ParameterPositionPathDescriptionCWE
pfquery parammicrosoft.com/technet/security/bulletin/ms08-040.mspx?pf=trueInteger underflow in SQL Server processing of backup file path leading to heap-based buffer overflow when loading crafted backup files via SMB/WebDAV pathnames.CWE-189

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 22:48Current
7.2High risk
Vulners AI Score7.2
CVSS 29
EPSS0.34539
CWE-189
sql serverinteger underflowremote code executionsmbwebdavmemory corruptionvulnerability
103