Vulnerability

(MS14-044) Vulnerabilities in SQL Server Could Allow Elevation of Privilege (2984340)

Publish date: August 14, 2014

CVE-2014-4061,CVE-2014-1820

SEVERITY

HIGH

//  ADVISORY DATE

14 AUG 2014


DESCRIPTION

This update resolves two vulnerabilities found in two components in several versions of Microsoft SQL Server. A cross-site scripting vulnerability exists in the SQL Master Data Services that when exploited could allow elevation of privilege of an attacker in the vulnerable computer. In addition, a denial of service vulnerability exists in SQL Server that when exploited could require a manual restart of the affected computer in order for services to continue.

SOLUTION

Featured Stories

Connect with us on