CVE-2001-0542

published 2001-12-20

CVE-2001-0542: Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	sql_server	—	—
microsoft	sql_server	—	—