CVE-2012-1891

CWE-119 — Buffer OverflowCWE-908 — Use of Uninitialized Resource3 documents3 sources
Severity
9.8CRITICAL
EPSS
59.0%
top 1.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Data Access ComponentsMicrosoft Windows Data Access Components
Timeline
PublishedJul 10
Latest updateMay 13

Description

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-9c2g-hm7x-rwg3: Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2↗2022-05-13
▶
CVEList
CVE-2012-1891: Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2↗2012-07-10
▶