Yag Kohha has reported a vulnerability in Microsoft Data Access Components, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the ADODB.Connection ActiveX control when handling the "Execute()" method. This can be exploited to cause a memory corruption by passing specially crafted parameters to the method.

Successful exploitation may allow execution of arbitrary code when a user e.g. visits a malicious website.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Yag Kohha

The vendor also credits Frsirt.

Original Advisory
MS07-009 (KB927779):
http://www.microsoft.com/technet/security/Bulletin/MS07-009.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers