CVE-2002-0644: Microsoft Data Engine

High severity, CVSS 7.5. EPSS: 11.4% chance of exploitation in the next 30 days.

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Affected products

• Microsoft Data Engine: version 2000 only
• Microsoft SQL Server: version 2000 only

Published 2002-08-12. Last modified 2026-06-16.