← Back

CVE-2015-1763

nvd nist
Published: Jul 14, 2015Modified: May 6, 2026

JSON object

Loading...
8.5
Vector
AV:N/AC:M/Au:S/C:C/I:C/A:C
Exploitability: 6.8 / Impact: 10.0
Source: NVD

Description

Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certain attempts to execute virtual functions, which allows remote authenticated users to execute arbitrary code via a crafted query, aka "SQL Server Remote Code Execution Vulnerability."

Affected (7)

Microsoft
1 product
Sql Server
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Sql Server
Version 2008 r2_sp2
Sql Server
Version 2008 r2_sp3
Sql Server
Version 2008 sp3
Sql Server
Version 2008 sp4
Sql Server
Version 2012 sp1
Sql Server
Version 2012 sp2
Sql Server
Version 2014

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

Source: secure@microsoft.com
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.