CVE-2011-0026: microsoft data_access_components Numeric Errors

EPSS trend

Probability

34.40%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 34.40% on 19-09-2026

19-09-202619-10-2026

EPSS score

34.40%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www.vupen.com/english/advisories/2011/0075VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/45695VDB EntryX Refsource BID
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002Vendor AdvisoryX Refsource MS
osvdb.org/70443VDB EntryX Refsource OSVDB
www.securitytracker.com/id?1024947VDB EntryX Refsource SECTRACK
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12333VDB EntrySignatureX Refsource OVAL
www.zerodayinitiative.com/advisories/ZDI-11-001/X Refsource MISC
secunia.com/advisories/42804Third Party AdvisoryX Refsource SECUNIA
www.us-cert.gov/cas/techalerts/TA11-011A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
support.avaya.com/css/P8/documents/100124846X Refsource CONFIRM

Related vulnerabilities

CVE-2003-0353microsoftdata_access_components21.67%23y ago21-08-2003 04:00Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.CVE-2003-0903microsoftdata_access_components37.49%22y ago01-09-2004 04:00Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.CVE-2012-1891microsoftdata_access_components+129.41%14y ago10-07-2012 21:00Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."CVE-2011-0027microsoftdata_access_components+154.37%15y ago12-01-2011 00:00Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.CVE-1999-1011microsoftdata_access_components+377.14%26y ago02-06-2000 04:00The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.CVE-2002-1142microsoftdata_access_components+276.00%22y ago01-09-2004 04:00Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 through 2.6, and Internet Explorer 5.01 through 6.0, allows remote attackers to execute code via a malformed HTTP request to the Data Stub.

All vulnerabilities indata_access_components windows_data_access_components

CVE-2011-0026: microsoft data_access_components Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References