Multiple vulnerabilities in Microsoft SQL Server

Description

Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to cause denial of service or inject arbitrary code.

Below is a complete list of vulnerabilities

1. Lack of stack memory restrictions can be exploited remotely via a specially designed T-SQL statement;
2. XSS vulnerability can be exploited remotely via a specially designed URL.

Original advisories

• CVE-2014-4061

• CVE-2014-1820

Related products

• Microsoft-SQL-Server

CVE list

• CVE-2014-4061
  high
• CVE-2014-1820
  warning

KB list

• 2977319
• 2977316
• 2977315
• 2977326
• 2984340
• 2977325
• 2977322
• 2977320
• 2977321

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com