Microsoft SQL RDBMS Engine CVE-2016-7254 Elevation of Privilege Vulnerability

description-logoDescription

An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability could gain elevated privileges that could be used to view, change, or delete data; or create new accounts. The security update addresses the vulnerability by correcting how SQL Server handles pointer casting.

affected-products-logoAffected Applications

Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2 (CU)
Microsoft SQL Server 2012 for x64-based Systems Service Pack 3 (CU)
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3 (CU)
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 3
Microsoft SQL Server 2012 for 32-bit Systems Service Pack 2
Microsoft SQL Server 2012 for x64-based Systems Service Pack 3
Microsoft SQL Server 2012 for x64-based Systems Service Pack 2
Microsoft SQL Server 2012 for x64-based Systems Service Pack 2 (CU)

CVE References

CVE-2016-7254