Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sql_server | Microsoft | 7.0 (including) | 7.0 (including) |
Sql_server | Microsoft | 2000 (including) | 2000 (including) |