CVE-2008-0106

CVE Database · CVE-2008-0106

CVE-2008-0106

· N/AModified

CVSS v3.1

N/A

EPSS

35.32%

Published

Jul 8, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.

Weaknesses (CWE)

CWE-119

Affected Products (6)

microsoft · data_enginevulnerable

microsoft · sql_servervulnerable

microsoft · sql_server_desktop_enginevulnerable

microsoft · sql_server_express_editionvulnerable

References (20)

http://secunia.com/advisories/30970

http://www.securityfocus.com/archive/1/494082/100/0/threaded

http://www.securityfocus.com/archive/1/516397/100/0/threaded

http://www.securitytracker.com/id?1020441

http://www.us-cert.gov/cas/techalerts/TA08-190A.html

US Government Resource

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

http://www.vupen.com/english/advisories/2008/2022/references

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785

KEV Catalog EPSS Scores Vendors All CVEs