Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2011-0027

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Data Access Components (MDAC)是一套用于在Windows平台上提供数据库连接的组件。 Microsoft Data Access Components (MDAC) 2.8 SP1和SP2版本以及Windows Data Access Components (WDAC) 6.0版本没有正确验证内部数据结构的内存分配。远程攻击者可借助能够触发整数wrap和缓冲区溢出的超大CacheSize属性执行任意代码。

AI Predicted 9.8 Difficulty: Easy EPSS 54.37% · P99

Public Exploits 1

ExploitDB · 1 EDB-15984 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2011-0027

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft MDAC和WDAC ADO记录内存漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Data Access Components (MDAC)是一套用于在Windows平台上提供数据库连接的组件。 Microsoft Data Access Components (MDAC) 2.8 SP1和SP2版本以及Windows Data Access Components (WDAC) 6.0版本没有正确验证内部数据结构的内存分配。远程攻击者可借助能够触发整数wrap和缓冲区溢出的超大CacheSize属性执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2011-0027

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0027

请登录查看更多情报信息。

Vendor Advisories for CVE-2011-0027 (9)

Other References for CVE-2011-0027 (2)

Same Patch Batch · n/a · 2011-01-12 · 14 CVEs total

CVE-2010-2599 RIM BlackBerry Device Software拒绝服务漏洞
CVE-2010-2604 RIM Research In Motion BlackBerry Device Software多个缓冲区溢出漏洞
CVE-2010-3912 SUSE Linux supportutils密码伪造漏洞
CVE-2011-0443 tinyBB inc/tinybb-settings.php文件SQL注入漏洞
CVE-2011-0444 Wireshark MAC-LTE解析器缓冲区溢出漏洞
CVE-2011-0445 Wireshark ASN.1 BER解析器拒绝服务攻击漏洞
CVE-2010-0214 PolyVision RoomWizard管理界面敏感信息泄露漏洞
CVE-2010-3926 Wb-I SGX-SP Final多个跨站脚本攻击漏洞
CVE-2011-0026 Microsoft MDAC和WDAC ODBC API DSN缓冲区溢出漏洞
CVE-2011-0314 IBM WebSphere MQ堆缓冲区溢出漏洞
CVE-2011-0315 IBM WebSphere Application Server跨站脚本攻击漏洞
CVE-2011-0316 IBM WAS敏感信息泄露漏洞
CVE-2011-0423 PolyVision RoomWizard HTTP会话信任管理漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-0027

No comments yet

Leave a comment