CVE

Id
30224  
CVE No.
CVE-2008-0107  
Status
Candidate  
Description
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."  
Phase
Assigned (20080107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
320691 30224 CVE-2008-0107 IDEFENSE:20080708 Microsoft SQL Server Restore Integer Underflow Vulnerability  View
320692 30224 CVE-2008-0107 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723  View
320693 30224 CVE-2008-0107 BUGTRAQ:20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability  View
320694 30224 CVE-2008-0107 URL:http://www.securityfocus.com/archive/1/archive/1/494082/100/0/threaded  View
320695 30224 CVE-2008-0107 BUGTRAQ:20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
320696 30224 CVE-2008-0107 URL:http://www.securityfocus.com/archive/1/archive/1/516397/100/0/threaded  View
320697 30224 CVE-2008-0107 MISC:http://www.insomniasec.com/advisories/ISVA-080709.1.htm  View
320698 30224 CVE-2008-0107 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
320699 30224 CVE-2008-0107 CONFIRM:http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
320700 30224 CVE-2008-0107 MS:MS08-040  View
320701 30224 CVE-2008-0107 URL:http://www.microsoft.com/technet/security/bulletin/ms08-040.mspx  View
320702 30224 CVE-2008-0107 CERT:TA08-190A  View
320703 30224 CVE-2008-0107 URL:http://www.us-cert.gov/cas/techalerts/TA08-190A.html  View
320704 30224 CVE-2008-0107 BID:30119  View
320705 30224 CVE-2008-0107 URL:http://www.securityfocus.com/bid/30119  View
320706 30224 CVE-2008-0107 OVAL:oval:org.mitre.oval:def:13936  View
320707 30224 CVE-2008-0107 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:13936  View
320708 30224 CVE-2008-0107 VUPEN:ADV-2008-2022  View
320709 30224 CVE-2008-0107 URL:http://www.vupen.com/english/advisories/2008/2022/references  View
320710 30224 CVE-2008-0107 SECTRACK:1020441  View
320711 30224 CVE-2008-0107 URL:http://www.securitytracker.com/id?1020441  View
320712 30224 CVE-2008-0107 SECUNIA:30970  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45858 JVNDB-2008-001168 Microsoft Excel における検証データ処理の不備による任意のコードを実行される脆弱性 Microsoft Excel には、検証データの取り扱いに不備があるために、任意のコードを実行される脆弱性が存在します。 CVE-2008-0111 30224 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001168.html  View