PT-2016-7265

CVE-2016-7249

·

Published

2016-11-08

·

Updated

2018-10-12

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016
Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain privileges. An attacker could exploit this by accessing an affected SQL server database, potentially gaining elevated privileges to view, change, or delete data, or create new accounts.
Recommendations For Microsoft SQL Server 2016, apply the necessary security updates to resolve the issue. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾