{"api_version":"1","generated_at":"2026-07-23T06:22:30+00:00","cve":"CVE-2007-4814","urls":{"html":"https://cve.report/CVE-2007-4814","api":"https://cve.report/api/cve/CVE-2007-4814.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4814","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4814"},"summary":{"title":"CVE-2007-4814","description":"Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-09-11 19:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://retrogod.altervista.org/microsoft_sqldmo.html","name":"http://retrogod.altervista.org/microsoft_sqldmo.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Error 404 :(","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36509","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36509","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25594","name":"http://www.securityfocus.com/bid/25594","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Microsoft SQL Server sqldmo.dll ActiveX Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/38399","name":"http://www.osvdb.org/38399","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/4398","name":"https://www.exploit-db.com/exploits/4398","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft SQL Server Distributed Management Objects BoF Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/4379","name":"https://www.exploit-db.com/exploits/4379","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft SQL Server Distributed Management Objects (sqldmo.dll) BoF","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/478822/100/0/threaded","name":"http://www.securityfocus.com/archive/1/478822/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3112","name":"http://securityreason.com/securityalert/3112","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft SQL Server for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow - SecurityReason.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4814","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4814","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"sql_server","cpe6":"2005","cpe7":"sp2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:08:33.789Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"3112","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3112"},{"name":"4379","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/4379"},{"name":"25594","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25594"},{"name":"4398","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/4398"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://retrogod.altervista.org/microsoft_sqldmo.html"},{"name":"38399","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/38399"},{"name":"20070907 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/478822/100/0/threaded"},{"name":"mssql-sqldmo-bo(36509)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36509"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-09-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"3112","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3112"},{"name":"4379","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/4379"},{"name":"25594","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25594"},{"name":"4398","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/4398"},{"tags":["x_refsource_MISC"],"url":"http://retrogod.altervista.org/microsoft_sqldmo.html"},{"name":"38399","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/38399"},{"name":"20070907 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/478822/100/0/threaded"},{"name":"mssql-sqldmo-bo(36509)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36509"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-4814","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"3112","refsource":"SREASON","url":"http://securityreason.com/securityalert/3112"},{"name":"4379","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/4379"},{"name":"25594","refsource":"BID","url":"http://www.securityfocus.com/bid/25594"},{"name":"4398","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/4398"},{"name":"http://retrogod.altervista.org/microsoft_sqldmo.html","refsource":"MISC","url":"http://retrogod.altervista.org/microsoft_sqldmo.html"},{"name":"38399","refsource":"OSVDB","url":"http://www.osvdb.org/38399"},{"name":"20070907 Microsoft SQL Server Distributed Management Objects OLE DLL for SQL Enterprise Manager (sqldmo.dll) remote buffer overflow poc","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/478822/100/0/threaded"},{"name":"mssql-sqldmo-bo(36509)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36509"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-4814","datePublished":"2007-09-11T19:00:00.000Z","dateReserved":"2007-09-11T00:00:00.000Z","dateUpdated":"2024-08-07T15:08:33.789Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-09-11 19:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:2005:sp2:*:*:*:*:*:*","matchCriteriaId":"26423C70-4475-4D7E-8CC0-D8CFADE16B26"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4814","Ordinal":"1","Title":"CVE-2007-4814","CVE":"CVE-2007-4814","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4814","Ordinal":"1","NoteData":"Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second argument to the Start method.","Type":"Description","Title":"CVE-2007-4814"},{"CveYear":"2007","CveId":"4814","Ordinal":"2","NoteData":"2007-09-11","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4814","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}