CVE-2019-0888: ActiveX Data Objects (ADO) Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory, aka 'ActiveX Data Objects (ADO) Remote Code Execution Vulnerability'.
Other sources
A remote code execution vulnerability exists in the way that ActiveX Data Objects (ADO) handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with the victim user’s privileges. An attacker could craft a website that exploits the vulnerability and then convince a victim user to visit the website. The security update addresses the vulnerability by modifying how ActiveX Data Objects handle objects in memory.
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0888?
CVE-2019-0888 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2019-0888?
To fix CVE-2019-0888, ensure that you install the latest security updates provided by Microsoft for affected systems.
Which versions of Windows are affected by CVE-2019-0888?
CVE-2019-0888 affects multiple versions of Windows including Windows 7, Windows 8.1, Windows 10, and various Windows Server versions.
Can CVE-2019-0888 be exploited remotely?
Yes, CVE-2019-0888 can be exploited remotely without user interaction, allowing attackers to execute arbitrary code.
What impact can CVE-2019-0888 have on my system?
Exploitation of CVE-2019-0888 can allow an attacker to take control of an affected system, leading to data theft or further network compromise.