CVE-2007-4814

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 46%

exploitation probability

46%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/4379unverified cve_referencewww.exploit-db.com/exploits/4398unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://retrogod.altervista.org/microsoft_sqldmo.html http://securityreason.com/securityalert/3112 https://exchange.xforce.ibmcloud.com/vulnerabilities/36509 https://www.exploit-db.com/exploits/4379 https://www.exploit-db.com/exploits/4398 http://www.osvdb.org/38399 http://www.securityfocus.com/archive/1/478822/100/0/threaded http://www.securityfocus.com/bid/25594