CVE-2008-0106
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...
CVE-2008-0106 is a high vulnerability (CVSS 9.0) in Microsoft Sql Server, published July 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.3%, the 98th percentile. No source names a fixed version.
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
CVE-2008-0106- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
CVE-2008-0106- Updated
- 2026-11-02
EUVDEUVD-2008-0119 No score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
EUVD-2008-0119- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gpgw-g3fv-mcr3 No score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
GHSA-gpgw-g3fv-mcr3- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
securitytracker.com/id?1020441
secunia.com/advisories/30970
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
vupen.com/english/advisories/2008/2022/references
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040
securityfocus.com/archive/1/494082/100/0/threaded
Show 6 moreShow less
us-cert.gov/cas/techalerts/TA08-190A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785
nvd.nist.gov/vuln/detail/CVE-2008-0106
github.com/advisories/GHSA-gpgw-g3fv-mcr3