CVE-2011-0027

Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability."  NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
microsoftCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
microsoftdata_access_components
2.8:sp1
microsoftdata_access_components
2.8:sp2
microsoftwindows_data_access_components
6.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/70444
http://secunia.com/advisories/42804
http://support.avaya.com/css/P8/documents/100124846
http://vreugdenhilresearch.nl/ms11-002-pwn2own-heap-overflow/
http://www.securityfocus.com/bid/45698
http://www.securitytracker.com/id?1024947
http://www.us-cert.gov/cas/techalerts/TA11-011A.html
http://www.vupen.com/english/advisories/2011/0075
http://www.zerodayinitiative.com/advisories/ZDI-11-002/
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12411
http://osvdb.org/70444
http://secunia.com/advisories/42804
http://support.avaya.com/css/P8/documents/100124846
http://vreugdenhilresearch.nl/ms11-002-pwn2own-heap-overflow/
http://www.securityfocus.com/bid/45698
http://www.securitytracker.com/id?1024947
http://www.us-cert.gov/cas/techalerts/TA11-011A.html
http://www.vupen.com/english/advisories/2011/0075
http://www.zerodayinitiative.com/advisories/ZDI-11-002/
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12411