NVD

Id
3968  
Name
CVE-2008-4110  
Description
Buffer overflow in the SQLVDIRLib.SQLVDirControl ActiveX control in ToolsBinnsqlvdir.dll in Microsoft SQL Server 2000 (aka SQL Server 8.0) allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a long URL in the second argument to the Connect method. NOTE: this issue is not a vulnerability in many environments, since the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-16  
Modified Date
2009-04-04  
Seq
2008-4110  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25292 3968 CVE-2008-4110 4262  View
25293 3968 CVE-2008-4110 20080911 sqlvdir.dll ActiveX Remote Buffer Overflow Exploit  View
25294 3968 CVE-2008-4110 31129  View
25295 3968 CVE-2008-4110 mssql-sqlvdir-bo(45186)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49550 JVNDB-2008-004860 Microsoft SQL Server 2000 の ToolsBinnsqlvdir.dll の SQLVDIRLib.SQLVDirControl ActiveX コントロールにおけるバッファオーバーフローの脆弱性 Microsoft SQL Server 2000 の ToolsBinnsqlvdir.dll の SQLVDIRLib.SQLVDirControl ActiveX コントロールには、バッファオーバーフローの脆弱性が存在します。 CVE-2008-4110 34223 CVE-2008-4110 3968 7.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004860.html 2008-09-16 2012-09-25 View