CVE-2019-1068 PoC — Microsoft SQL Server 输入验证错误漏洞

Source

https://github.com/Vulnerability-Playground/CVE-2019-1068

Associated Vulnerability

Title: Microsoft SQL Server 输入验证错误漏洞 (CVE-2019-1068)
Description:A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

Description

Root cause analysis and PoC for a Microsoft SQL Server Stack Overflow Vulnerability by reversing svl.dll.

Readme

# CVE-2019-1068

Root cause analysis and PoC for a Microsoft SQL Server Stack Overflow Vulnerability by reversing “svl.dll”.

Links to our work:

1. [Ataberk's Blog](https://0xsaiyajin.github.io/vulnerability-research/2021/02/06/discovering-an-undisclosed-stack-overflow-vulnerability-in-mssql-server-cve-2019-1068.html)
3. [Fatih's Blog](https://medium.com/@fecassie/discovering-an-undisclosed-stack-overflow-vulnerability-in-microsoft-sql-server-cve-2019-1068-933b9df1a8b)
4. [Cem's Blog](https://cems.fun/2021/02/06/cve-2019-1068.html)

[https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →