77 matches found
MS11-002: Vulnerabilities in Microsoft Data Access Components Could Allow Remote Code Execution (2451910)
The version of Microsoft Data Access Components MDAC installed on the remote Windows host is affected by two vulnerabilities, which could allow arbitrary code execution if a user views a specially crafted web page: - A buffer overflow in the Open Database Connectivity ODBC API used by third-party...
Microsoft Data Access Components CacheSize Memory Corruption (MS11-002; CVE-2011-0027)
Microsoft Data Access Components MDAC is a collection of components that make it easy for programs to access databases and then to manipulate the data within them. MDAC provides a consolidated set of functions for working with different kinds of data sources in a consistent manner The vulnerabili...
VulnCheck KEV: CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects ADO and distributed in Microsoft Data Access Components MDAC 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors...
Microsoft Data Access Components ActiveX Data Objects Memory Corruption Vulnerability
Description Microsoft Data Access Components are prone to a remote memory-corruption vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the...
Microsoft Data Access Components Broadcast Reply Buffer Overflow (MS04-003; CVE-2003-0903)
The SQL Server Resolution Protocol is a simple application-level protocol that is used for the transfer of requests and responses between clients and database server discovery services. Microsoft Data Access Components MDAC is a collection of components that provides the underlying functionality...
CVE-2006-5559
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects ADODB.Connection.2.7 and ADODB.Connection.2.8 in the Microsoft Data Access Components MDAC 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote...
CVE-2006-5559
The ADODB.Connection ActiveX control within the Microsoft Data Access Components (MDAC) is vulnerable to a memory corruption flaw. Specifically, the Execute method fails to properly track freed memory when the second argument is a BSTR . This allows a remote, unauthenticated attacker to cause a d...
CVE-2006-5559
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects ADODB.Connection.2.7 and ADODB.Connection.2.8 in the Microsoft Data Access Components MDAC 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote...
CVE-2006-5559: Improper Input Validation
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects ADODB.Connection.2.7 and ADODB.Connection.2.8 in the Microsoft Data Access Components MDAC 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote...
CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects ADO and distributed in Microsoft Data Access Components MDAC 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects ADO and distributed in Microsoft Data Access Components MDAC 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors...
CVE-2006-0003: Undefined Security Weakness
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects ADO and distributed in Microsoft Data Access Components MDAC 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors...
Microsoft MDAC RDS.Dataspace ActiveX Control Remote Code Execution Vulnerability
Description The Microsoft MDAC RDS.Dataspace ActiveX control is vulnerable to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page. Technologies Affected Hitachi DA Broker for ODBC 01-00 Hitachi DA Broker for ODBC 01-...
CVE-2002-1142
CVE-2002-1142 is a heap-based buffer overflow in the MDAC RDS component caused by an unchecked buffer in the RDS Data Stub when handling malformed HTTP requests. Affected: MDAC versions 2.1–2.6 and Internet Explorer 5.01–6.0. Impact: remote code execution with the privileges of the service (e.g.,...
CVE-2003-0903
CVE-2003-0903 corresponds to a buffer overflow in Microsoft Data Access Components (MDAC) 2.5–2.8. The vulnerability resides in a MDAC component that handles responses to SQL Server discovery broadcasts; a malicious UDP reply to a broadcast request can trigger a buffer overrun. Exploitation could...
CVE-2003-0903
Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...
CVE-2002-1142
Heap-based buffer overflow in the Remote Data Services RDS component of Microsoft Data Access Components MDAC 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub...
CVE-2003-0903: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in a component of Microsoft Data Access Components MDAC 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request...
CVE-2002-1142: Undefined Security Weakness
Heap-based buffer overflow in the Remote Data Services RDS component of Microsoft Data Access Components MDAC 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub...