CveMateVulnerability intelligence

CVE-2006-0003: microsoft data_access_components

CVSS: 5.1v2.0MediumModified

Published 12-04-2006Last modified 07-08-2024

Vulnerability summary

CVE-2006-0003 is a medium (CVSS 5.1) vulnerability in microsoft data_access_components. EPSS estimates a 82.79% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk

47/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.1/10

010

Medium · v2.0 (NVD)

EPSS score

82.79%

0%100%

Critical · +0.29 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits4exploit-database, metasploit

Timeline

12-04-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.05.1

EPSS trend

Probability

82.79%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

+0.29 pp

From 82.50% on 19-09-2026

19-09-202619-10-2026

EPSS score

82.79%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

exploit-databaseremotewindowsVerified
Microsoft Internet Explorer - 'MDAC' Remote Code Execution (MS06-014) (Metasploit) (2)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)
Maturity: weaponized

Show all 4 exploits

MetasploitremoteVerified
MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution
exploit/windows/browser/ie_createobject
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Microsoft1 product

data_access_components2.5:sp3 | 2.7 | 2.7:sp1 | 2.8 | 2.8:sp1 | 2.8:sp2

1 vendor · 1 product

References

29 links

www.vupen.com/english/advisories/2006/2452VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/475108/100/100/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/487216/100/200/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/487219/100/200/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/475104/100/100/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/19583Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.htmlX Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/20797VDB EntryX Refsource BID
securitytracker.com/id?1015894VDB EntryX Refsource SECTRACK

Show all 29 references

exchange.xforce.ibmcloud.com/vulnerabilities/25006VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA06-101A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.htmlX Refsource CONFIRM
www.securityfocus.com/bid/17462VDB EntryX Refsource BID
www.exploit-db.com/exploits/2164ExploitX Refsource EXPLOIT DB
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778VDB EntrySignatureX Refsource OVAL
www.exploit-db.com/exploits/2052ExploitX Refsource EXPLOIT DB
secunia.com/advisories/20719Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204VDB EntrySignatureX Refsource OVAL
www.kb.cert.org/vuls/id/234812Third Party AdvisoryX Refsource CERT VNUS Government Resource
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014Vendor AdvisoryX Refsource MS
www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdfX Refsource MISC
www.vupen.com/english/advisories/2006/1319VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/475490/100/100/threadedMailing ListX Refsource BUGTRAQ
www.osvdb.org/24517VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/29915VDB EntryX Refsource XF
www.securityfocus.com/archive/1/475118/100/100/threadedMailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742VDB EntrySignatureX Refsource OVAL