exploits , vulnerabilities , articles , Microsoft MDAC RDS.Dataspace ActiveX Control Remote Code Execution Vulnerability

Title	Microsoft MDAC RDS.Dataspace ActiveX Control Remote Code Execution Vulnerability
Published	2006-04-11-12:00AM
Updated	2006-04-11-10:27PM
Class	Design Error
CVE	CVE-2006-0003
Remote	Yes
Local	No
Credit	Golan Yosef and Stefano Meller are credited with the discovery of this vulnerability.
Vulnerable	Microsoft MDAC 2.8 Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows Server 2003 Datacenter Edition 64bit Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Enterprise Edition 64bit Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Web Edition Microsoft MDAC 2.7 SP1 Microsoft MDAC 2.7 Microsoft MDAC 2.5 SP3 Microsoft MDAC 2.8.0 SP2 Microsoft MDAC 2.8.0 SP1
Not Vulnerable
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability
2008-12-04 Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
2008-12-03 Adobe Acrobat 9 Unspecified PDF Document Encryption Weakness
2008-12-03 Ocean12 Mailing List Manager Gold SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-03 IBM Rational ClearQuest Maintenance Tool Local Information Disclosure Vulnerability
2008-12-03 VMware Products Unspecified Host Memory Corruption Vulnerability
2008-12-03 IBM Rational ClearQuest Web Multiple Unspecified Cross Site Scripting Vulnerabilities