Data Access Components

Vendor:

First CVE: Jul 19, 1999 · Active for 27 years

11

Total CVEs

More Total CVEs than 89% of tracked products

1.6

Avg CVEs / Year

Higher CVE frequency than 59% of tracked products

8.7

Avg CVSS

Higher Avg CVSS than 78% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Data Access Components over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jul 19, 1999

27 years ago

Most Recent CVE

Jul 10, 2012

5,127 days ago

CVE Severity & Scoring

Data Access Components11 CVEs

9%

82%

9%

All CVEs352,231 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network1 (9.1%)

Unknown10 (90.9%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (9.1%)

High0 (0.0%)

Unknown10 (90.9%)

User Interaction

None1 (9.1%)

Unknown10 (90.9%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None1 (9.1%)

Unknown10 (90.9%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-1999-1011HIGH The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute a	Jul 19, 1999	10.0	83	NO	YES
CVE-2006-0003MEDIUM Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and	Apr 12, 2006	5.1	79	NO	YES
CVE-2002-1142HIGH Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows re	Nov 29, 2002	7.5	77	NO	YES
CVE-2011-0027HIGH Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, w	Jan 12, 2011	9.3	71	NO	YES
CVE-2006-5559HIGH The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP	Oct 27, 2006	9.3	56	NO	YES
CVE-2012-1891CRITICAL Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary cod	Jul 10, 2012	9.8	47	NO	NO
CVE-2011-0026HIGH Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDA	Jan 12, 2011	9.3	45	NO	NO
CVE-2003-0903HIGH Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadc	Feb 17, 2004	10.0	44	NO	NO
CVE-2002-1918HIGH Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to t	Dec 31, 2002	10.0	32	NO	NO
CVE-2002-0695HIGH Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to ex	Aug 12, 2002	7.5	32	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

3 CVEs

27.3% of CVEs· 98th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

45.5% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Data Access Components

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2.8	6	8.5	49.0%	3
2.7	6	7.7	37.5%	2
2.6	5	8.1	25.1%	1
2.5	7	8.1	29.4%	3
2.12.4202.3	2	7.5	19.3%	0
2.1.1.3711.11	2	7.5	19.3%	0
2.1	4	8.1	47.9%	2
2.0	3	8.3	38.6%	1
1.5	3	8.3	38.6%	1