VULNERABILITY INTELLIGENCE
CVE-2008-0086
CVSS score9 HIGH
EPSS probability61.93%
CISA KEVNot currently listed
Published2008-07-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer