Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.