For curiosity and prevention, what does the "special crafted" (as MS says it) query looks like? I often see SQL Instances not patched (not under my control / jurisdiction) so having an idea of what it looks like could help to identify weird behavior or at least to know what to look for.

Thx