CVE-2008-5416 CVE-2008-5416

漏洞描述

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka "SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability."

影响产品

微软公司sql_server查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
sql_server_dump SQL Server - Dump Files sql_server	中危	5.3	—	PoCEXP	2024/07/02
sql_server_reportviewer SQL Server ReportViewer - Exposure sql_server	高危	—	—	PoCEXP	2024/01/15
mssql_default_logins Microsoft Sql - Default Logins sql_server	高危	—	—	PoCEXP	2024/01/04
CVE-2020-0618 Microsoft SQL Server Reporting Services - Remote Code Execution sql_server	高危	8.8	94.3%	PoCEXP	2020/02/11
CVE-2012-1856RCE CVE-2012-1856 sql_server	高危	8.8	92.4%	PoCEXP	2012/08/15
CVE-2012-0158RCE CVE-2012-0158 sql_server	高危	8.8	94.3%	PoCEXP	2012/04/10

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞