CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-0026

Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.61

EPSS Ranking 98.2%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2011-0026

Microsoft » Data Access Components » Version: 2.8

cpe:2.3:a:microsoft:data_access_components:2.8
Microsoft » Windows Data Access Components » Version: 6.0

cpe:2.3:a:microsoft:windows_data_access_components:6.0
Microsoft » Windows 2003 Server » Version: N/A

cpe:2.3:o:microsoft:windows_2003_server:-
Microsoft » Windows 7 » Version: N/A

cpe:2.3:o:microsoft:windows_7:-
Microsoft » Windows Server 2003 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2003:-
Microsoft » Windows Server 2003 » Version: r2

cpe:2.3:o:microsoft:windows_server_2003:r2
Microsoft » Windows Server 2008 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2008:-
Microsoft » Windows Server 2008 » Version: r2

cpe:2.3:o:microsoft:windows_server_2008:r2
Microsoft » Windows Vista » Version: N/A

cpe:2.3:o:microsoft:windows_vista:-
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-
Microsoft » Windows Xp » Version: sp2

cpe:2.3:o:microsoft:windows_xp:sp2
Microsoft » Windows Xp » Version: sp3

cpe:2.3:o:microsoft:windows_xp:sp3
Microsoft » Windows Xp » Version: unknown

cpe:2.3:o:microsoft:windows_xp:unknown

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-0026

Products

Pricing

Contact Us