National Cyber-Alert System

Vulnerability Summary for CVE-2006-0003

Overview

Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

http://www.microsoft.com/technet/security/Bulletin/MS06-014.mspx}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-101A

Name: TA06-101A

Type: Advisory

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-101A.html

US-CERT Vulnerability Note: VU#234812

Name: VU#234812

Type: Advisory

Hyperlink:http://www.kb.cert.org/vuls/id/234812

External Source: BID

Name: 17462

Hyperlink:http://www.securityfocus.com/bid/17462

External Source: BUGTRAQ

Name: 20080128 Re: Exploit in IE6,7

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/487219/100/200/threaded

External Source: BUGTRAQ

Name: 20080128 Exploit in IE6,7

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/487216/100/200/threaded

External Source: MS

Name: MS06-014

Type: Advisory

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-014.mspx

External Source: VUPEN

Name: ADV-2006-1319

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2006/1319

External Source: SECUNIA

Name: 19583

Type: Advisory

Hyperlink:http://secunia.com/advisories/19583

External Source: XF

Name: ie-wscriptshell-command-execution(29915)

Hyperlink:http://xforce.iss.net/xforce/xfdb/29915

External Source: XF

Name: mdac-rdsdataspace-execute-code(25006)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25006

External Source: MISC

Name: http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf

Hyperlink:http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf

External Source: BID

Name: 20797

Hyperlink:http://www.securityfocus.com/bid/20797

External Source: BUGTRAQ

Name: 20070731 Re: Exploit In Internet Explorer

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/475490/100/100/threaded

External Source: BUGTRAQ

Name: 20070730 RE: Exploit In Internet Explorer

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/475118/100/100/threaded

External Source: BUGTRAQ

Name: 20070730 Re: Exploit In Internet Explorer

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/475108/100/100/threaded

External Source: BUGTRAQ

Name: 20070729 Exploit In Internet Explorer

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/475104/100/100/threaded

External Source: OSVDB

Name: 24517

Hyperlink:http://www.osvdb.org/24517

External Source: MILW0RM

Name: 2164

Hyperlink:http://www.milw0rm.com/exploits/2164

External Source: MILW0RM

Name: 2052

Hyperlink:http://www.milw0rm.com/exploits/2052

External Source: CONFIRM

Name: http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html

Hyperlink:http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html

External Source: CONFIRM

Name: http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html

Hyperlink:http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html

External Source: VUPEN

Name: ADV-2006-2452

Hyperlink:http://www.frsirt.com/english/advisories/2006/2452

External Source: SECTRACK

Name: 1015894

Hyperlink:http://securitytracker.com/id?1015894

External Source: SECUNIA

Name: 20719

Hyperlink:http://secunia.com/advisories/20719

US Government Resource: oval:org.mitre.oval:def:1778

Name: oval:org.mitre.oval:def:1778

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1778

US Government Resource: oval:org.mitre.oval:def:1742

Name: oval:org.mitre.oval:def:1742

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1742

US Government Resource: oval:org.mitre.oval:def:1511

Name: oval:org.mitre.oval:def:1511

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1511

US Government Resource: oval:org.mitre.oval:def:1323

Name: oval:org.mitre.oval:def:1323

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1323

US Government Resource: oval:org.mitre.oval:def:1204

Name: oval:org.mitre.oval:def:1204

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1204