CVE-2007-4814

EPSS 45.7%

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/4379unverified cve_referencewww.exploit-db.com/exploits/4398unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://retrogod.altervista.org/microsoft_sqldmo.html http://securityreason.com/securityalert/3112 https://exchange.xforce.ibmcloud.com/vulnerabilities/36509 https://www.exploit-db.com/exploits/4379 https://www.exploit-db.com/exploits/4398 http://www.osvdb.org/38399 http://www.securityfocus.com/archive/1/478822/100/0/threaded http://www.securityfocus.com/bid/25594