Microsoft Data Access Components — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Data Access Components, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-1999-1011 — CVSS 10.0 (critical): The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods…
• CVE-2002-1918 — CVSS 10.0 (critical): Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact…
• CVE-2003-0903 — CVSS 10.0 (critical): Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code…
• CVE-2012-1891 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows…
• CVE-2011-0027 — CVSS 9.3 (critical): Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory…
• CVE-2006-5559 — CVSS 9.3 (critical): The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the…
• CVE-2011-0026 — CVSS 9.3 (critical): Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and…
• CVE-2002-0695 — CVSS 7.5 (high): Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server…
• CVE-2002-1142 — CVSS 7.5 (high): Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and…
• CVE-2003-0353 — CVSS 7.5 (high): Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute…
• CVE-2006-0003 — CVSS 5.1 (medium): Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in…