Reported April 18, 2002, by Microsoft.
· Microsoft SQL Server 7.0
· Microsoft SQL Server 2000
An unchecked buffer exists in several of the extended store procedures that Microsoft shipped with SQL Server 7.0 and SQL Server 2000. An attacker can exploit this vulnerability to cause the SQL Server service to fail or to run code in the security context in which SQL Server is running.
Discovered by Microsoft.