Lucene search

K
cveMitreCVE-2003-0903
HistorySep 01, 2004 - 4:00 a.m.

CVE-2003-0903

2004-09-0104:00:00
CWE-119
mitre
web.nvd.nist.gov
27
cve-2003-0903
buffer overflow
microsoft data access components
mdac
remote code execution
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.429

Percentile

97.4%

Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.

Affected configurations

Nvd
Node
microsoftdata_access_componentsMatch2.5
OR
microsoftdata_access_componentsMatch2.6
OR
microsoftdata_access_componentsMatch2.7
OR
microsoftdata_access_componentsMatch2.8
VendorProductVersionCPE
microsoftdata_access_components2.5cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*
microsoftdata_access_components2.6cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*
microsoftdata_access_components2.7cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*
microsoftdata_access_components2.8cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.429

Percentile

97.4%