T-SQL Debugger Buffer Overrun Fix

The following update is designed for machines with Microsoft Visual Studio 6.0, Enterprise Edition.

Issue Description

Visual Studio 6.0, Enterprise Edition includes a Microsoft Visual Basic^® feature for debugging T-SQL. This feature contains a problem that could cause a buffer overrun. Because the default installation of the Debugger object allows anyone to start the debugger and run as the logged-on interactive user, this bug potentially could be exploited with malicious intentions.

Symptoms

A Visual Basic T-SQL Debugger object can have a stack corruption which may occur due to a buffer overflow inside the method. If the string is sufficiently large, the stack frame maybe overwritten, resulting in the following error:

Run-time error '-2147023170 (800706be)': Automation error. The remote procedure call failed.

or sometimes resulting in an Access Violation in the Visual Basic 6.0 integrated development environment (VB6.EXE process).

More information

For additional information, please see the following Microsoft Security Bulletin.

Solution

Click the link to download this update file. It will update the T-SQL Debugger and eliminate this security problem.

Please Note: This patch is not localized and can be used without issue with localized versions of VS6.