Unscored CVE-2002-0056 EUVD-2002-0056GHSA-qxrc-c48w-hrf6

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDat…

Published Feb 21, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.

References

MS02-007 vendor-advisory
VU#619707 third-party-advisory
20020219 MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS mailing-list
20020219 MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS mailing-list
4135 vdb-entry
oval:org.mitre.oval:def:271 vdb-entry signature