PT-2011-2023 · Microsoft · Windows Data Access Components+1
Published
2011-01-11
·
Updated
2023-12-07
·
CVE-2011-0026
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Data Access Components (MDAC) versions 2.8 SP1 through 2.8 SP2
Windows Data Access Components (WDAC) version 6.0
Description
The issue is related to an integer signedness error in the SQLConnectW function within the odbc32.dll of Microsoft Data Access Components. This error allows remote attackers to execute arbitrary code by providing a long string in the Data Source Name (DSN) and a crafted
szDSN argument. The crafted argument bypasses a signed comparison, leading to a buffer overflow.Recommendations
For Microsoft Data Access Components (MDAC) versions 2.8 SP1 and 2.8 SP2, consider applying a patch or update to fix the integer signedness error in the SQLConnectW function.
For Windows Data Access Components (WDAC) version 6.0, consider applying a patch or update to fix the integer signedness error in the SQLConnectW function.
As a temporary workaround, consider restricting the length of the
szDSN argument to prevent buffer overflow until a patch is available.Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Data Access Components
Windows Data Access Components