Vulnerability in SQL Server could allow remote code execution.

This story continues at http://www.databasejournal.com/news/...ory-961040.htm