medium5.1Public exploit code
CVE-2006-0003
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Compo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)2010-09-20 · remote · windows · Verified
- Microsoft Internet Explorer - 'MDAC' Remote Code Execution (MS06-014) (Metasploit) (2)2006-08-10 · remote · windows · Verified
- Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)2006-07-21 · remote · windows · Verified
Impact
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Data Access Components | Versions 2.5, 2.7, 2.8 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19583
- http://secunia.com/advisories/20719
- http://securitytracker.com/id?1015894
- http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html
- http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html
- http://www.kb.cert.org/vuls/id/234812
- http://www.osvdb.org/24517
- http://www.securityfocus.com/archive/1/475104/100/100/threaded
- http://www.securityfocus.com/archive/1/475108/100/100/threaded
- http://www.securityfocus.com/archive/1/475118/100/100/threaded
- http://www.securityfocus.com/archive/1/475490/100/100/threaded
- http://www.securityfocus.com/archive/1/487216/100/200/threaded
- http://www.securityfocus.com/archive/1/487219/100/200/threaded
- http://www.securityfocus.com/bid/17462
- http://www.securityfocus.com/bid/20797
- http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
- http://www.us-cert.gov/cas/techalerts/TA06-101A.html
- http://www.vupen.com/english/advisories/2006/1319
- http://www.vupen.com/english/advisories/2006/2452
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29915
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511