Description
Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information.
Below is a complete list of vulnerabilities
- An improper pointer casting handling can be exploited by remotely authenticated attackers to gain privileges;
- An improper request parameters validation at MDS can be exploited remotely via XSS attack to gain privileges;
- Lack of parameters restrictions at Microsoft SQL Analysis Service can be exploited by remotely authenticated attacker to obtain sensitive information;
- An improper ACL check at Microsoft SQL Server Agent can be exploited by remotely authenticated attackers to gain privileges.
Original advisories
Related products
CVE list
- CVE-2016-7254 high
- CVE-2016-7253 high
- CVE-2016-7252 warning
- CVE-2016-7251 warning
- CVE-2016-7250 high
- CVE-2016-7249 high
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!