Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
saintSAINT CorporationSAINT:BC1DB9AB9516112650D9CE49519F32F1
HistoryJul 16, 2007 - 12:00 a.m.

Windows MDAC RDS.Dataspace ActiveX control vulnerability

2007-07-1600:00:00
SAINT Corporation
my.saintcorporation.com
22

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.967

Percentile

99.7%

JSON

Added: 07/16/2007
CVE: CVE-2006-0003
BID: 17462
OSVDB: 24517

Background

Microsoft Data Access Components (MDAC) enable Universal Data Access in Windows applications deployed over a network.

Problem

A cross-zone scripting vulnerability in the RDS.Dataspace ActiveX control in MDAC allows command execution when a user loads a specially crafted web page.

Resolution

Apply the update referenced in Microsoft Security Bulletin 06-014.

References

<http://www.kb.cert.org/vuls/id/234812&gt;

Limitations

On Windows 2000, MDAC must be installed.

Platforms

Windows

Related

prion 1
securityvulns 2
nessus 1
cert 1
canvas 1
cve 1
nvd 1
saint 3
cvelist 1
checkpoint_advisories 1
metasploit 1
exploitdb 1
threatpost 1
thn 1
prion
prion
Design/Logic Flaw
2006-04-12 00:02:00
securityvulns
securityvulns
Microsoft Security Bulletin MS06-014 Vulnerability in the Microsoft Data Access Components &#40;MDAC&#41; Function Could Allow Code Execution &#40;911562&#41;
2006-04-11 00:00:00
US-CERT Technical Cyber Security Alert TA06-101A -- Microsoft Windows and Internet Explorer Vulnerabilities
2006-04-12 00:00:00
nessus
nessus
MS06-014: Vulnerability in MDAC Could Allow Code Execution (911562)
2006-04-11 00:00:00
cert
cert
RDS.Dataspace ActiveX control bypasses ActiveX security model
2006-04-11 00:00:00
canvas
canvas
Immunity Canvas: MS06_014
2006-04-12 00:02:00
cve
cve
CVE-2006-0003
2006-04-12 00:02:00
nvd
nvd
CVE-2006-0003
2006-04-12 00:02:00
saint
saint
Windows MDAC RDS.Dataspace ActiveX control vulnerability
2007-07-16 00:00:00
Windows MDAC RDS.Dataspace ActiveX control vulnerability
2007-07-16 00:00:00
Windows MDAC RDS.Dataspace ActiveX control vulnerability
2007-07-16 00:00:00
cvelist
cvelist
CVE-2006-0003
2006-04-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer Multiple Protections (CVE-2005-2831; CVE-2006-0003)
2006-05-01 00:00:00
metasploit
metasploit
MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution
2009-09-09 21:23:11
exploitdb
exploitdb
Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)
2010-09-20 00:00:00
threatpost
threatpost
Popular Sports Site Goal.com Serves Malware
2011-05-03 19:05:02
thn
thn
Phoenix Exploit's Kit 2.8 mini version
2011-10-12 17:41:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.967

Percentile

99.7%

JSON
Related for SAINT:BC1DB9AB9516112650D9CE49519F32F1
prion1securityvulns2nessus1cert1canvas1cve1nvd1saint3cvelist1checkpoint_advisories1metasploit1exploitdb1threatpost1thn1