Does the SQL Server Resolution Service exists on previous versions of SQL Server?
No. Previous versions of SQL Server did not support multiple instances, and the SQL Server Resolution Service did not exist. As a result, no other versions of SQL Server are affected by the vulnerabilities. The Affected Versions section says that Microsoft Desktop Engine (MSDE) is also affected by these vulnerabilities. What is MSDE? MSDE is a database engine that has built and based on SQL Server 2000 technology, and which ships as part of several Microsoft products, including Microsoft Visual Studio and Microsoft Office Developer Edition. There is a direct connection between versions of MSDE and versions of SQL Server. MSDE 2000 is based on SQL Server 2000. Buffer Overruns in SQL Server Resolution Service: What is the scope of this vulnerability? There are actually two vulnerabilities here, both of which are buffer-overrun vulnerabilities. An attacker who successfully exploited either vulnerability could gain the ability to cause the server to fail, or to run code using the privilege
