CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 82.5%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.
Description
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 82.50% probability · 100th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/data access components
- Source
- secure@microsoft.com
References
- http://secunia.com/advisories/19583Vendor Advisory
- http://secunia.com/advisories/20719
- http://securitytracker.com/id?1015894
- http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html
- http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html
- http://www.kb.cert.org/vuls/id/234812Third Party Advisory, US Government Resource
- http://www.osvdb.org/24517
- http://www.securityfocus.com/archive/1/475104/100/100/threaded
- http://www.securityfocus.com/archive/1/475108/100/100/threaded
- http://www.securityfocus.com/archive/1/475118/100/100/threaded
- http://www.securityfocus.com/archive/1/475490/100/100/threaded
- http://www.securityfocus.com/archive/1/487216/100/200/threaded
- http://www.securityfocus.com/archive/1/487219/100/200/threaded
- http://www.securityfocus.com/bid/17462
- http://www.securityfocus.com/bid/20797
- http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
- http://www.us-cert.gov/cas/techalerts/TA06-101A.htmlThird Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/1319
- http://www.vupen.com/english/advisories/2006/2452
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29915
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778
- https://www.exploit-db.com/exploits/2052
- https://www.exploit-db.com/exploits/2164
- http://secunia.com/advisories/19583Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.