VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 12, 2014· Updated Jun 17, 2026

CVE-2014-4061

CVE-2014-4061

Description

Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Microsoft/SQL Server9 versions
    cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:itanium:*:*:*:*:*+ 8 more
    • cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:itanium:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x64:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2008:r2_sp2:x86:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2008:sp3:itanium:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2008:sp3:x64:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2008:sp3:x86:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2012:sp1:x64:*:*:*:*:*
    • cpe:2.3:a:microsoft:sql_server:2012:sp1:x86:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.