Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Priority HIGH 72

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers acc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29406 Published 2012-07-10 No fix listed CWE-908
Priority HIGH 73

Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.54372 Published 2011-01-12 No fix listed CWE-20
Priority HIGH 65

Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execu…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.34399 Published 2011-01-12 No fix listed CWE-189
Priority HIGH 69

The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not pr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.43619 Published 2006-10-27 No fix listed CWE-20