CVE-2012-1891 Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML da...
HighCVSS 9.3
EPSS 29.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft data access components | = 2.8-sp1 | No fix listed |
| Microsoft data access components | = 2.8-sp2 | No fix listed |
| Microsoft windows data access components | = 6.0 | No fix listed |
| Microsoft data access components | = 2.8 | No fix listed |
References
- TA12-192A third-party-advisory us-government-resource
- MS12-045 vendor-advisory
- oval:org.mitre.oval:def:14783 signature vdb-entry