Secunia Logo  


Secunia PSI WorldMap
 
Microsoft MDAC ADODB.Connection ActiveX Control Vulnerability
Secunia Advisory: SA22452
Release Date: 2007-02-13
Popularity: 19,319 views

Critical:
Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows XP Home Edition
Microsoft Windows XP Professional

Software:Microsoft Data Access Components (MDAC) 2.x

Binary Analysis: BA32 :: Available for 1 Credit

Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply patches.

MDAC 2.5 SP3 on Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=EF163E3E-DD3B-4429-98A4-720DA2C96464

MDAC 2.8 SP1 on Windows XP SP2:
http://www.microsoft.com/downloads/de...=6B0CDB65-AEF4-489F-B917-812D9F7687BD

MDAC 2.8 on Windows Server 2003:
http://www.microsoft.com/downloads/de...=34D24335-4EC0-49E7-9E3F-787F89DD7B1D

MDAC 2.8 on Windows Server 2003 for Itanium-based systems:
http://www.microsoft.com/downloads/de...=58322D1B-A1A8-4BA6-BA1B-6649013CC324

MDAC 2.7 SP1 installed on Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=591B0967-C8AB-4B85-A9AF-C01E8D8E3ADC

MDAC 2.8 installed on Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=BC864245-175A-4B55-AB4A-FB5D0E03DCFC

MDAC 2.8 SP1 installed on Windows 2000 SP4:
http://www.microsoft.com/downloads/de...=341859BF-8DAA-419B-88CD-E5E8EB4A5BAD

Provided and/or discovered by:
Yag Kohha

The vendor also credits Frsirt.

Original Advisory:
MS07-009 (KB927779):
http://www.microsoft.com/technet/security/Bulletin/MS07-009.mspx

Other References:
US-CERT VU#589272:
http://www.kb.cert.org/vuls/id/589272

Change Page:
[ 1 ] [ 2 ] [ 3 ]



Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 8
New vulnerabilities: 19
Updated advisories: 13

Highly // 157 views
SUSE Update for Multiple Packages
Less // 158 views
Debian update for php-mail
Less // 199 views
Fedora update for snort
Not // 184 views
Fedora update for asterisk

23rd Nov, 2009
New advisories: 16
New vulnerabilities: 116
Updated advisories: 33


Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Internet Explorer Layout Handling Memory Corruption Vulnerability // 71 views
2. Sun Java JDK / JRE Multiple Vulnerabilities // 53 views
3. Firefox Sage Extension Cross-Context Scripting Vulnerability // 52 views
4. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 48 views
5. Adobe Reader/Acrobat Multiple Vulnerabilities // 42 views
6. Adobe Flash Player Multiple Vulnerabilities // 41 views
7. Opera Multiple Vulnerabilities // 40 views
8. Cacti Multiple Script Insertion Vulnerabilities // 40 views
9. Fedora update for snort // 40 views
10. PEAR Net_Ping Command Injection Vulnerability // 39 views