Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
| Software | From | Fixed in |
|---|---|---|
| sybase / adaptive_server | 12.0 | 12.0.x |
| sybase / adaptive_server | 12.5 | 12.5.x |