MS14-044: Description of the security update for SQL Server 2008 SP3 (GDR): August 12, 2014

Resolves vulnerabilities in SQL Server SP3 that could allow elevation of privilege if a user goes to a specially crafted website that injects a client-side script into the user's ...

support.microsoft.com