NVD

Id
24009  
Name
CVE-2015-1762  
Description
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain permissions and making a crafted query, as demonstrated by the VIEW SERVER STATE permission, aka "SQL Server Remote Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-14  
Modified Date
2015-07-15  
Seq
2015-1762  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127130 24009 CVE-2015-1762 MS15-058  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8255 JVNDB-2015-003575 Microsoft SQL Server における任意のコードを実行される脆弱性 Microsoft SQL Server は、トランザクションレプリケーションが設定されている場合、不特定の関数の呼び出しにおいて初期化されていないメモリの使用を適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2015-1762 78987 CVE-2015-1762 24009 7.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003575.html 2015-07-14 2015-07-16 View