CVE-2011-0027: Input Validation
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0027?
CVE-2011-0027 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2011-0027?
To fix CVE-2011-0027, apply the latest security updates provided by Microsoft for affected software versions.
Which versions are affected by CVE-2011-0027?
CVE-2011-0027 affects Microsoft Data Access Components 2.8 SP1 and SP2, and Windows Data Access Components 6.0.
Can CVE-2011-0027 be exploited remotely?
Yes, CVE-2011-0027 can be exploited remotely, allowing attackers to execute arbitrary code through a specially crafted CacheSize property.
What are the potential impacts of CVE-2011-0027?
The potential impacts of CVE-2011-0027 include unauthorized access, data compromise, and complete control over the affected system.