CVE-2003-0903: Microsoft Data Access Components

High severity, CVSS 10.0. EPSS: 37.5% chance of exploitation in the next 30 days.

Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.

Affected products

• Microsoft Data Access Components: version 2.5 only; version 2.6 only; version 2.7 only; version 2.8 only

Published 2004-02-17. Last modified 2026-06-16.