NVD

Id
98  
Name
CVE-2008-0107  
Description
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-07-08  
Modified Date
2012-01-26  
Seq
2008-0107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
924 98 CVE-2008-0107 20080708 Microsoft SQL Server Restore Integer Underflow Vulnerability  View
925 98 CVE-2008-0107 oval:org.mitre.oval:def:13936  View
926 98 CVE-2008-0107 http://www.insomniasec.com/advisories/ISVA-080709.1.htm  View
927 98 CVE-2008-0107 MS08-040  View
928 98 CVE-2008-0107 20080708 Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability  View
929 98 CVE-2008-0107 20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX  View
930 98 CVE-2008-0107 30119  View
931 98 CVE-2008-0107 1020441  View
932 98 CVE-2008-0107 TA08-190A  View
933 98 CVE-2008-0107 http://www.vmware.com/security/advisories/VMSA-2011-0003.html  View
934 98 CVE-2008-0107 http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html  View
935 98 CVE-2008-0107 ADV-2008-2022  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46193 JVNDB-2008-001503 Microsoft SQL Server のバックアップファイルのレコードサイズに関するバッファオーバーフローの脆弱性 Microsoft SQL Server には、バックアップファイルのレコードサイズの取り扱いに不備があり、整数アンダーフローの脆弱性が存在します。 CVE-2008-0107 30220 CVE-2008-0107 98 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001503.html 2008-07-08 2011-03-04 View