CVE-2012-1891: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Data Access Components MDAC 2.8 SP1 and SP2 and Windows Data Access Components WDAC 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE...

CVE-2011-0027: Improper Input Validation

Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer...

CVE-2003-0903: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...

CVE-2002-1142: Undefined Security Weakness

Heap-based buffer overflow in the Remote Data Services RDS component of Microsoft Data Access Components MDAC 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub...

CVE-1999-1011: Undefined Security Weakness

The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...