Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*

part: a version: 7.0 update: sp4

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSql Server (fd983e7c-5172-5f6b-b132-c409278d1646)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0107 vulnerable 2026-06-08 04:50:10.260380 Details available
Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka "SQL Server Memory Corruption Vulnerability."
Published: 2008-07-08T23:00:00.000Z
Updated: 2024-08-07T07:32:23.808Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0106 vulnerable 2026-06-08 04:50:10.259704 Details available
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
Published: 2008-07-08T23:00:00.000Z
Updated: 2024-08-07T07:32:24.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0086 vulnerable 2026-06-08 04:50:10.224861 Details available
Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.
Published: 2008-07-08T23:00:00.000Z
Updated: 2024-08-07T07:32:23.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-0085 vulnerable 2026-06-08 04:50:10.215640 Details available
SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.
Published: 2008-07-08T23:00:00.000Z
Updated: 2024-08-07T07:32:23.883Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1560 vulnerable 2026-06-08 04:47:54.541640 Details available
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
Published: 2005-02-20T05:00:00.000Z
Updated: 2024-08-08T00:53:24.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0232 vulnerable 2026-06-08 04:47:21.086726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0231 vulnerable 2026-06-08 04:47:21.086169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0230 vulnerable 2026-06-08 04:47:21.082393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1872 vulnerable 2026-06-08 04:47:18.368959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1145 vulnerable 2026-06-08 04:46:23.046504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1138 vulnerable 2026-06-08 04:46:23.030573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1137 vulnerable 2026-06-08 04:46:23.030054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0721 vulnerable 2026-06-08 04:46:22.090251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.