PT-2016-7266 · Microsoft · Sql Server

Publicado 2016-11-08 · Atualizado 2018-10-12 · CVE-2016-7250

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server versions 2014 SP1 through 2016

Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain elevated privileges. An attacker with access to an affected SQL server database could exploit this to view, change, or delete data, or create new accounts.

Recommendations For Microsoft SQL Server versions 2014 SP1 through 2016, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-7250

Produtos afetados

Sql Server

Referências · 5

• http://securityfocus.com/bid/94060 · Nota
• http://securitytracker.com/id/1037250 · Nota
• https://osv.dev/vulnerability/CVE-2016-7250 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7250 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-136 · Aviso do Fabricante