CVE-2011-0027: Input Validation
First published: Wed Jan 12 2011(Updated: )
Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures, which allows remote attackers to execute arbitrary code, possibly via a large CacheSize property that triggers an integer wrap and a buffer overflow, aka "ADO Record Memory Vulnerability." NOTE: this might be a duplicate of CVE-2010-1117 or CVE-2010-1118.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Microsoft Windows Data Access Components | =2.8-sp1 | |
| Microsoft Windows XP | ||
| All of | ||
| Microsoft Windows Data Access Components | =2.8-sp2 | |
| Any of | ||
| Microsoft Windows Server 2003 | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows XP | =sp2 | |
| All of | ||
| Microsoft Data Access Components | =6.0 | |
| Any of | ||
| Microsoft Windows 7 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows Data Access Components | =2.8-sp1 | |
| Microsoft Windows XP | ||
| Microsoft Windows Data Access Components | =2.8-sp2 | |
| Microsoft Windows Server 2003 | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Data Access Components | =6.0 | |
| Microsoft Windows 7 | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | ||
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =sp2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Server | =r2 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp1 | |
| Microsoft Windows Vista | =sp2 | |
| Microsoft Windows Vista | =sp2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vupen.com/english/advisories/2011/0075
- http://vreugdenhilresearch.nl/ms11-002-pwn2own-heap-overflow/
- http://www.us-cert.gov/cas/techalerts/TA11-011A.html
- http://www.zerodayinitiative.com/advisories/ZDI-11-002/
- http://www.securitytracker.com/id?1024947
- http://support.avaya.com/css/P8/documents/100124846
- http://secunia.com/advisories/42804
- http://www.securityfocus.com/bid/45698
- http://osvdb.org/70444
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12411
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002
Frequently Asked Questions
What is the severity of CVE-2011-0027?
CVE-2011-0027 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2011-0027?
To fix CVE-2011-0027, apply the latest security updates provided by Microsoft for affected software versions.
Which versions are affected by CVE-2011-0027?
CVE-2011-0027 affects Microsoft Data Access Components 2.8 SP1 and SP2, and Windows Data Access Components 6.0.
Can CVE-2011-0027 be exploited remotely?
Yes, CVE-2011-0027 can be exploited remotely, allowing attackers to execute arbitrary code through a specially crafted CacheSize property.
What are the potential impacts of CVE-2011-0027?
The potential impacts of CVE-2011-0027 include unauthorized access, data compromise, and complete control over the affected system.
- collector/nvd-historical
- agent/weakness
- agent/type
- agent/severity
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows data access components
- version/microsoft windows data access components/2.8-sp1
- canonical/microsoft windows xp
- version/microsoft windows data access components/2.8-sp2
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/sp2
- canonical/microsoft windows server
- version/microsoft windows server/sp2
- version/microsoft windows xp/sp2
- canonical/microsoft data access components
- version/microsoft data access components/6.0
- canonical/microsoft windows 7
- version/microsoft windows server/r2
- canonical/microsoft windows vista
- version/microsoft windows vista/sp1
- version/microsoft windows vista/sp2