VULNERABILITY INTELLIGENCE
CVE-2001-0542
CVSS score7.5 HIGH
EPSS probability13.62%
CISA KEVNot currently listed
Published2001-12-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.
Primary references
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — US Government Resource
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108