CVE-2003-0903

2004-02-1705:00:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.429

Percentile

97.4%

JSON

Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.

Affected configurations

Nvd

Node

microsoftdata_access_componentsMatch2.5

microsoftdata_access_componentsMatch2.6

microsoftdata_access_componentsMatch2.7

microsoftdata_access_componentsMatch2.8

VendorProductVersionCPE
microsoftdata_access_components2.5cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*
microsoftdata_access_components2.6cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*
microsoftdata_access_components2.7cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*
microsoftdata_access_components2.8cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	data_access_components	2.5	cpe:2.3:a:microsoft:data_access_components:2.5:::::::*
microsoft	data_access_components	2.6	cpe:2.3:a:microsoft:data_access_components:2.6:::::::*
microsoft	data_access_components	2.7	cpe:2.3:a:microsoft:data_access_components:2.7:::::::*
microsoft	data_access_components	2.8	cpe:2.3:a:microsoft:data_access_components:2.8:::::::*