Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-0027
HistoryJan 12, 2011 - 1:00 a.m.

CVE-2011-0027

2011-01-1201:00:00
CWE-20
[email protected]
web.nvd.nist.gov
35
cve-2011-0027
microsoft data access components
mdac
wdac
memory vulnerability
ado record
buffer overflow
nvd

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.957 High

EPSS

Percentile

99.4%

JSON

Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka “ADO Record Memory Vulnerability.” NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.

Related

prion 3
checkpoint_advisories 1
zdi 2
securityvulns 2
openvas 2
mskb 1
nessus 1
cve 2
ibm 3
prion
prion
Design/Logic Flaw
2011-01-12 01:00:00
Heap overflow
2010-03-25 21:00:00
Design/Logic Flaw
2010-03-25 21:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Data Access Components CacheSize Memory Corruption (MS11-002; CVE-2011-0027)
2011-01-11 00:00:00
zdi
zdi
Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability
2011-01-11 00:00:00
Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability
2012-08-22 00:00:00
securityvulns
securityvulns
Microsoft ADO security vulnerabilities
2011-01-12 00:00:00
ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability
2012-08-26 00:00:00
openvas
openvas
Microsoft Windows Data Access Components Remote Code Execution Vulnerabilities (2451910)
2011-01-12 00:00:00
Microsoft Windows Data Access Components Remote Code Execution Vulnerabilities (2451910)
2011-01-12 00:00:00
mskb
mskb
MS11-002: Vulnerabilities in Microsoft Data Access Components could allow remote code execution
2014-06-21 14:37:34
nessus
nessus
MS11-002: Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910)
2011-01-11 00:00:00
cve
cve
CVE-2010-1117
2010-03-25 21:00:00
CVE-2010-1118
2010-03-25 21:00:00
ibm
ibm
Security Bulletin: IBM Sterling Connect:Enterprise for UNIX is affected by multiple vulnerabilities in OpenSSL
2022-09-25 20:45:36
Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities
2022-09-26 05:45:55
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by multiple vulnerabilities in OpenSSL
2022-09-25 23:13:40

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.957 High

EPSS

Percentile

99.4%

JSON
Related for CVE-2011-0027
prion3checkpoint_advisories1zdi2securityvulns2openvas2mskb1nessus1cve2ibm3