CVE-2020-1455

Medium

Description

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.

SeverityMedium
CVSS5.3
Exploit probability—
ProductMicrosoft Sql Server Management Studio
PublishedAug 17, 2020
First seenAug 17, 2020

How to fix

Update
  • microsoft sql_server_management_studio18.6 or later

Affected products

ProductAffected versionsFixed in
microsoft sql_server_management_studiov < 18.618.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.