CVE-2008-0107
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."
Key facts
- CVSS score
- 9.0 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:S/C:C/I:C/A:C- Weakness (CWE)
- CWE-189
- EPSS score
- 34.5% (98th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2008-0120)
- Published
- July 8, 2008
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2008-0120 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- microsoft / data engine
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server
- microsoft / sql server desktop engine
- microsoft / windows 2003 server
- microsoft / windows 2003 server
- microsoft / windows server 2003
- microsoft / windows server 2003
- microsoft / windows server 2008
- microsoft / windows server 2008
- microsoft / wmsde
- microsoft / wyukon
- microsoft / wyukon
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=723
- http://secunia.com/advisories/30970(Vendor Advisory)
- http://www.insomniasec.com/advisories/ISVA-080709.1.htm
- http://www.securityfocus.com/archive/1/494082/100/0/threaded
- http://www.securityfocus.com/archive/1/516397/100/0/threaded
- http://www.securityfocus.com/bid/30119
- http://www.securitytracker.com/id?1020441
- http://www.us-cert.gov/cas/techalerts/TA08-190A.html(US Government Resource)
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
- http://www.vupen.com/english/advisories/2008/2022/references(Vendor Advisory)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13936
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain