Priority HIGH 82
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.7714 · Published 2000-06-02 · No fix listed CWE-264
Priority HIGH 73
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.54372 · Published 2011-01-12 · No fix listed CWE-20
Priority HIGH 72
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers acc…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.29406 · Published 2012-07-10 · No fix listed CWE-908
Priority HIGH 72
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a mal…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.76004 · Published 2004-09-01 · No fix listed
Priority HIGH 69
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not pr…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.43619 · Published 2006-10-27 · No fix listed CWE-20
Priority HIGH 69
Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.37494 · Published 2004-09-01 · No fix listed CWE-119
Priority HIGH 65
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execu…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.34399 · Published 2011-01-12 · No fix listed CWE-189
Priority MEDIUM 64
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.82789 · Published 2006-04-12 · No fix listed
Priority MEDIUM 59
Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.16404 · Published 2005-06-28 · No fix listed
Priority MEDIUM 52
Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.2167 · Published 2003-08-21 · No fix listed
Priority MEDIUM 50
Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that ca…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.16946 · Published 2003-04-02 · No fix listed