Microsoft SQL Server 2000 - Text Formatting Functions Contain Unchecked Buffers 354983

Downloads:

Requirements:

Windows NT 4 SP 6/Windows 2003 SP 1/Windows XP AMD 64-bit/Windows XP 64-bit SP 1/Windows NT 4 SP 2/Windows 2000 SP 1/Windows 2003 64-bit/Windows 2003 AMD 64-bit/Windows XP 64-bit SP 2/Windows NT 4 SP 3/Windows 2000 SP 2/Windows Server 2003 x64 R2/Windows 2000/Windows 2003 64-bit SP 1/Windows Vista AMD 64-bit/Windows XP Itanium 64-bit/Windows NT 4 SP 4/Windows 2000 SP 3/Windows NT 4/Windows XP 32-bit/Windows XP SP 1/Windows Server 2003 x86 R2/Windows ME/Windows 2003 Itanium 64-bit/Windows NT 4 SP 5/Windows 2000 SP 4/Windows Vista 32-bit/Windows XP 64-bit/Windows NT 4 SP 1/Windows Server 2008 x64/Windows NT 3/Windows Server 2008 x86/Windows XP/Windows Server 2008/Windows 2003/Windows Vista Itanium 64-bit/Windows XP Itanium 64-bit SP 1/Windows 2003 32-bit/Windows XP Itanium 64-bit SP 2/Windows XP SP 2/Windows 95/Windows 98/Windows Vista/Windows NT/Windows 2003 Itanium 64-bit SP 1/Windows XP Pro

File size:

8MB Test your broadband speed

Licence:

Update

Date added:

6 Nov 2003

More downloads from:

microsoft

Previously published under Q304850.

SQL Server 2000 provides a number of functions that enable database queries to generate text messages. In some cases, the functions create a text message and store it in a variable; in others, the functions directly display the message. A vulnerability has been discovered with these functions.

Use of an invalid format type character may allow SQL Server to overwrite an internal buffer that may overwrite an address in the SQL Server process space with arbitrary data. If SQL Server overwrites an address in the SQL Server process space with arbitrary data, SQL Server may potentially allow you to execute arbitrary code within SQL Server or the SQL Server process may abnormally terminate.

CNET Networks is not responsible for the content of this Publisher's Description.