CVE-2012-1891: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Microsoft Data Access Components MDAC 2.8 SP1 and SP2 and Windows Data Access Components WDAC 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE...

CVE-2011-0027: Improper Input Validation

Microsoft Data Access Components MDAC 2.8 SP1 and SP2, and Windows Data Access Components WDAC 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer...