[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frBaQNFcOUmCL0G9CMe3mKc8MmDammJU1uJ7hm6oANvw":3,"g5a-ex:microsoft\u002Fdata_engine@*":101,"g5a-family:microsoft\u002Fdata_engine":103},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"microsoft","data_engine",2,26,0,"2008-07-08",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",22,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2000",16,"Data Engine by Microsoft is a technology product with 2 tracked versions and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},[26,34,40,45,50,55,62,66,70,74],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":33},"CVE-2000-1209","The \"sa\" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages that use these products such as (4) Tumbleweed Secure Mail (MMS) (5) Compaq Insight Manager, and (6) Visio 2000, which allows remote attackers to gain privileges, as exploited by worms such as Voyager Alpha Force and Spida.","2002-08-12",10,"v2","Critical",0.87307,{"cveId":35,"description":36,"publishedDate":29,"cvssScore":37,"cvssVersion":31,"severity":38,"isKev":17,"epssScore":39},"CVE-2002-0649","Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer\u002FSapphire worm.",7.5,"High",0.8475,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":37,"cvssVersion":31,"severity":38,"isKev":17,"epssScore":44},"CVE-2002-1123","Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the \"Hello\" overflow.","2002-09-24",0.77712,{"cveId":46,"description":47,"publishedDate":12,"cvssScore":48,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":49},"CVE-2008-0086","Buffer overflow in the convert function in Microsoft SQL Server 2000 SP4, 2000 Desktop Engine (MSDE 2000) SP4, and 2000 Desktop Engine (WMSDE) allows remote authenticated users to execute arbitrary code via a crafted SQL expression.",9,0.61927,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":54},"CVE-2002-0721","Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.","2002-09-05",0.46307,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":31,"severity":60,"isKev":17,"epssScore":61},"CVE-2003-0231","Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long request to a named pipe.","2003-08-27",5,"Medium",0.36179,{"cveId":63,"description":64,"publishedDate":12,"cvssScore":48,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":65},"CVE-2008-0106","Buffer overflow in Microsoft SQL Server 2005 SP1 and SP2, and 2005 Express Edition SP1 and SP2, allows remote authenticated users to execute arbitrary code via a crafted insert statement.",0.35323,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":48,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":69},"CVE-2008-0107","Integer underflow in SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 allows remote authenticated users to execute arbitrary code via a (1) SMB or (2) WebDAV pathname for an on-disk file (aka stored backup file) with a crafted record size value, which triggers a heap-based buffer overflow, aka \"SQL Server Memory Corruption Vulnerability.\"",0.34539,{"cveId":71,"description":72,"publishedDate":29,"cvssScore":37,"cvssVersion":31,"severity":38,"isKev":17,"epssScore":73},"CVE-2002-0644","Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.",0.11419,{"cveId":75,"description":76,"publishedDate":12,"cvssScore":59,"cvssVersion":31,"severity":60,"isKev":17,"epssScore":77},"CVE-2008-0085","SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Internal Database (WYukon) SP2 does not initialize memory pages when reallocating memory, which allows database operators to obtain sensitive information (database contents) via unknown vectors related to memory page reuse.",0.10677,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Data Engine by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Data Engine by Microsoft covering 2 versions with 26 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Data Engine vulnerabilities, Data Engine security, Data Engine CVE, Microsoft Data Engine, Data Engine threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Data Engine","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fdata_engine",{"@type":89,"name":90,"url":91},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","2 versions tracked",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Data Engine Security Vulnerabilities","Security vulnerabilities affecting Data Engine by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-18T17:26:06.294Z","3.0",{"rows":102,"total":11,"capped":17,"failed":11},[],[]]