CVE-2014-4061
6.8
Vector
AV:N/AC:L/Au:S/C:N/I:N/A:C
Exploitability: 8.0 / Impact: 6.9
Source: NVD
Description
Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability."
Affected (8)
Products: Microsoft: Sql Server
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2008 r2_sp2 |
Related CWEs
References (8)
Source: secure@microsoft.com
Vendor Advisory
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.