CVE-2015-1761
Microsoft SQL Server 2008-2014 Authenticated Privilege Escalation via Incorrect Pointer Cast
Title source: llmDescription
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remote authenticated users to gain privileges by leveraging certain write access, aka "SQL Server Elevation of Privilege Vulnerability."
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032893
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058
Vendor Advisory x_refsource_confirm
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05382740
Scores
EPSS
0.1850
EPSS Percentile
96.9%
Details
CWE
CWE-284
Status
published
Products (3)
microsoft/sql_server
2008 r2_sp2 (4 CPE variants)
microsoft/sql_server
2012 sp1 (2 CPE variants)
microsoft/sql_server
2014
Published
Jul 14, 2015
Tracked Since
Feb 18, 2026