CVE:CVE-2000-1084
CNNVD:CNNVD-200101-039
SQL Server和Microsoft SQL服务器桌面引擎(MSDE)的xp_updatecolvbm函数在调用Extended Stored Procedures(XP)SQL Server API的srv_paraminfo函数前不正确限制缓冲区长度。攻击者可以利用该漏洞导致服务拒绝并执行任意代码，也称为"Extended Stored Procedure Parameter Parsing" 漏洞。
solution:Upgrade microsoft data_engine to a higher version than 1.0,2000,and avoid the version 1.0,2000; Upgrade microsoft sql_server to a higher version than 7.0,2000,and avoid the version 7.0,2000