CVE-2008-0106
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
CVE-2008-0106- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
CVE-2008-0106- Updated
- 2026-11-02
EUVDEUVD-2008-0119No score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
EUVD-2008-0119- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gpgw-g3fv-mcr3No score
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2,...
Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.
- Record
GHSA-gpgw-g3fv-mcr3- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0106 is a high vulnerability (CVSS 9.0) in Microsoft Sql Server, published July 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.3%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1020441
secunia.com/advisories/30970
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
vupen.com/english/advisories/2008/2022/references
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-040
securityfocus.com/archive/1/494082/100/0/threaded
Show 6 moreShow less
us-cert.gov/cas/techalerts/TA08-190A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13785
nvd.nist.gov/vuln/detail/CVE-2008-0106
github.com/advisories/GHSA-gpgw-g3fv-mcr3