Remote Code Execution Vulnerability Affects Microsoft ODBC Driver for SQL Server

CVE-2024-28932

Summary

A remote code execution vulnerability exists in the Microsoft ODBC Driver for SQL Server when the driver improperly handles specific requests. An attacker who successfully exploits this vulnerability could execute arbitrary code on the target system. This may allow the attacker to install programs, view, change, or delete data, or create new accounts with full user rights. To effectively mitigate this issue, it is crucial for users to ensure they are using the latest version of the Microsoft ODBC Driver for SQL Server and to apply any security updates provided by Microsoft.

References