A heap-based buffer overflow exists in Microsoft SQL Server, which allows an authorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory and allowing for code execution.