CVE-2007-4814

Severity CVSS v4.0:

Pending analysis

Type:

CWE-119 Buffer Errors

Publication date:

11/09/2007

Last modified:

09/04/2025

Description

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

7.50

Severity 2.0

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:microsoft:sql_server:2005:sp2::::::

To consult the complete list of CPE names with products and versions, see this page

References to Advisories, Solutions, and Tools

http://retrogod.altervista.org/microsoft_sqldmo.html
http://securityreason.com/securityalert/3112
http://www.osvdb.org/38399
http://www.securityfocus.com/archive/1/478822/100/0/threaded
http://www.securityfocus.com/bid/25594
https://exchange.xforce.ibmcloud.com/vulnerabilities/36509
https://www.exploit-db.com/exploits/4379
https://www.exploit-db.com/exploits/4398
http://retrogod.altervista.org/microsoft_sqldmo.html
http://securityreason.com/securityalert/3112
http://www.osvdb.org/38399
http://www.securityfocus.com/archive/1/478822/100/0/threaded
http://www.securityfocus.com/bid/25594
https://exchange.xforce.ibmcloud.com/vulnerabilities/36509
https://www.exploit-db.com/exploits/4379
https://www.exploit-db.com/exploits/4398