It looks like there is a new Bug in SQL server that can allow for remote detonation of the server. Well ok not detonation but this newly discovered flaw can allow for remote execution of code.