CVE-2007-4814
Microsoft SQL Server - Buffer Overflow via SQLServer ActiveX Control Start Method
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-4814. PoCs published by 96sysim, rgod.
AI-analyzed exploit summary This exploit leverages a buffer overflow in Microsoft SQL Server Distributed Management Objects (SQLDMO.dll) via a malicious HTML file. It uses heap spraying and shellcode execution to achieve remote code execution (RCE) on vulnerable systems.
Description
Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.
Exploits (2)
This exploit leverages a buffer overflow in Microsoft SQL Server Distributed Management Objects (SQLDMO.dll) via a malicious HTML file. It uses heap spraying and shellcode execution to achieve remote code execution (RCE) on vulnerable systems.
This is a proof-of-concept exploit for a buffer overflow vulnerability in Microsoft SQL Server's sqldmo.dll (CVE-2007-4814). It leverages an ActiveX control to trigger the overflow via the Start method, potentially allowing remote code execution.