CVE-2002-0186: Microsoft SQL Server

High severity, CVSS 7.5. EPSS: 55.5% chance of exploitation in the next 30 days.

Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."

Affected products

• Microsoft SQL Server: version 2000 only

Published 2002-07-03. Last modified 2026-06-16.