The host is running Microsoft SQL Server, which is prone to buffer-overflow vulnerability.

Successful exploitation allows remote attackers to execute arbitrary code and failed attepts causes denial-of-service conditions. Impact Level : Application

No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. For updates refer http://www.microsoft.com/sqlserver

Applications sqlvdir.dll ActiveX control is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. The issue occurs when excessive amounts of data to the Control() method is passed.

Microsoft SQL Server 2000 SP4 and prior on Windows (all)

• http://support.microsoft.com/kb/240797
• http://www.securityfocus.com/archive/1/496232

---

Updated on 2017-03-28