Microsoft Data Access Components vulnerabilities

11 CVEs affecting Microsoft Data Access Components, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-1891, published 2012-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0003, published 2006-04-12. Medium severity, CVSS 5.1. EPSS: 82.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote…
CVE-1999-1011, published 1999-07-19. High severity, CVSS 10.0. EPSS: 77.1% chance of exploitation in the next 30 days. The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
CVE-2002-1142, published 2002-11-29. High severity, CVSS 7.5. EPSS: 76% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to…
CVE-2011-0027, published 2011-01-12. High severity, CVSS 9.3. EPSS: 54.4% chance of exploitation in the next 30 days. Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote…
CVE-2006-5559, published 2006-10-27. High severity, CVSS 9.3. EPSS: 43.6% chance of exploitation in the next 30 days. The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8,…
CVE-2003-0903, published 2004-02-17. High severity, CVSS 10.0. EPSS: 37.5% chance of exploitation in the next 30 days. Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
CVE-2011-0026, published 2011-01-12. High severity, CVSS 9.3. EPSS: 34.4% chance of exploitation in the next 30 days. Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows…
CVE-2012-1891, published 2012-07-10. Critical severity, CVSS 9.8. EPSS: 29.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML…
CVE-2003-0353, published 2003-08-27. High severity, CVSS 7.5. EPSS: 21.7% chance of exploitation in the next 30 days. Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to…
CVE-2002-0695, published 2002-08-12. High severity, CVSS 7.5. EPSS: 16.9% chance of exploitation in the next 30 days. Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary…

Latest

CVE-2002-1918, published 2002-12-31. High severity, CVSS 10.0. EPSS: 16.4% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details…