{"cvss":0.0,"datePublished":"2003-08-01T00:00:00Z","dateUpdated":"2003-08-01T00:00:00Z","description":"Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.","dueDate":"","id":"CVE-2002-0649","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"data_engine","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Microsoft data_engine Improper Restriction of Operations within the Bounds of a Memory Buffer","vendor":"Microsoft"}