CVE-2008-0107

2008-07-0823:41:00

CWE-189

[email protected]

web.nvd.nist.gov

sql server

integer underflow

remote code execution

smb

webdav

memory corruption

vulnerability

6.8 Medium

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.428 Medium

EPSS

Percentile

97.3%

JSON

Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka “SQL Server Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:sql_servermicrosoft sql servereq2005
microsoft:sql_server_desktop_enginemicrosoft sql server desktop engineeq2000
microsoft:sql_servermicrosoft sql servereq7.0
microsoft:sql_servermicrosoft sql servereq2000
microsoft:data_enginemicrosoft data engineeq1.0
microsoft:wmsdemicrosoft wmsdeeq2000
microsoft:wyukonmicrosoft wyukoneq*
microsoft:windows_server_2008microsoft windows server 2008eq*

CPE	Name	Operator	Version
microsoft:sql_server	microsoft sql server	eq	2005
microsoft:sql_server_desktop_engine	microsoft sql server desktop engine	eq	2000
microsoft:sql_server	microsoft sql server	eq	7.0
microsoft:sql_server	microsoft sql server	eq	2000
microsoft:data_engine	microsoft data engine	eq	1.0
microsoft:wmsde	microsoft wmsde	eq	2000
microsoft:wyukon	microsoft wyukon	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	*