An unchecked buffer in SQL Server's OLE DB function, which is used to connect to remote data sources on an ad hoc basis, could be used to crash the server or possibly execute arbitrary code on the affected machine. For a patch and more information, go to: http://www.microsoft.com/technet/security/bulletin/MS02-007.asp
[]