CVE-2003-0353

Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components MDAC 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434...

CVE-2003-0353

CVE-2003-0353 details a Unicode buffer overflow in the SQL-DMO component of Microsoft MDAC (versions 2.5–2.7) that can be exploited by a long UDP broadcast response on port 1434, enabling remote code execution. Affected packages include MDAC 2.5/2.6/2.7 with various SPs; fixes are described in MS...

Microsoft Data Access Components ODBC Buffer Overflow Vulnerability

Description A buffer overflow vulnerability exists in Microsoft Data Access Components that may allow an attacker to run arbitrary code on a client machine. This vulnerability is exposed when a client or a SQL Server implementing the SQL-DMO library, sends a broadcast request for Microsoft SQL...

CVE-2002-0695

Buffer overflow in the Transact-SQL T-SQL OpenRowSet component of Microsoft Data Access Components MDAC 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command...

MS02-040 / MS03-033: Unchecked buffer in MDAC Function (326573 / 823718)

The remote Microsoft Data Access Component MDAC server is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host, provided he can load and execute a database query on this server. C Tenable Network Security, Inc. MS03-033 supercedes MS02-040 Note: The fix for thi...

CVE-2002-1142

Heap-based buffer overflow in the Remote Data Services RDS component of Microsoft Data Access Components MDAC 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub...

Buffer overflow in MDAC

Buffer overflow on maleformed RDS request...

CERT Advisory CA-2002-33 Heap Overflow Vulnerability in Microsoft Data

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-33 Heap Overflow Vulnerability in Microsoft Data Access Components MDAC Original release date: November 21, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected All Microso...

Microsoft Security Bulletin MS02-065: Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution (Q329414)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Buffer Overrun in Microsoft Data Access Components Could Lead to Code Execution Q329414 Date: 20 November, 2002 Software: Microsoft Data Access Components MDAC 2.1 Microsoft Data...

Microsoft Data Access Components RDS Buffer Overflow Vulnerability

Description Microsoft Data Access Components MDAC contains a buffer overflow in a Remote Data Services RDS component. The server side RDS component affected is called the RDS Data Stub, while the client side is called the Data Space control. Successful exploitation of this vulnerability could all...

Microsoft Windows Data Access Components contains heap overflow in Data Stubs when parsing a malformed HTTP request

Overview A vulnerability in the Microsoft Data Access Components MDAC could lead to remote execution of code with the privileges of the current process, or user. Description Microsoft Data Access Components MDAC is a collection of utilities and routines to process requests between databases and...

CVE-2002-0695

Buffer overflow in the Transact-SQL T-SQL OpenRowSet component of Microsoft Data Access Components MDAC 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command...

Security Bulletin MS02-040: Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise (Q326573)

---------------------------------------------------------------------- Title: Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise Q326573 Date: 31 July 2002 Software: Microsoft Data Access Components Impact: Run code of attacker's choice Max Risk: Moderate Bulletin: MS02-040...

EUVD-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

CVE-2001-0238

The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...

CVE-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

CVE-2001-0238

Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests...

Security Bulletin MS01-022

---------------------------------------------------------------------- Title: WebDAV Service Provider Can Allow Scripts to Levy Requests as User Date: 18 April 2001 Software: Microsoft Data Access Component Internet Publishing Provider Impact: Web-based script could levy WebDAV requests on the...

CVE-1999-1011

The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...

CVE-1999-1011

The Remote Data Service RDS DataFactory component of Microsoft Data Access Components MDAC in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands...