CVE-2007-4814 Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attacker...
HighCVSS 7.5
EPSS 45.7%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft sql server | = 2005-sp2 | No fix listed |
References
- retrogod.altervista.org
- 3112 third-party-advisory
- 38399 vdb-entry
- 20070907 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc mailing-list
- 25594 exploit vdb-entry
- mssql-sqldmo-bo(36509) vdb-entry
- 4379 exploit
- 4398 exploit