CVE-2008-0085

CVE Database · CVE-2008-0085

CVE-2008-0085

· N/AModified

CVSS v3.1

N/A

EPSS

10.68%

Published

Jul 8, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.

Weaknesses (CWE)

CWE-200

Affected Products (21)

microsoft · data_enginevulnerable

microsoft · sql_servervulnerable

References (18)

http://secunia.com/advisories/30970

Vendor Advisory

http://www.securityfocus.com/archive/1/516397/100/0/threaded

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020441

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA08-190A.html

Third Party AdvisoryUS Government Resource

http://www.vmware.com/security/advisories/VMSA-2011-0003.html

PatchThird Party Advisory

http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html

KEV Catalog EPSS Scores Vendors All CVEs