CVE:CVE-2011-0027
CNNVD:CNNVD-201101-121
Microsoft Data Access Components (MDAC)是一套用于在Windows平台上提供数据库连接的组件。
Microsoft Data Access Components (MDAC) 2.8 SP1和SP2版本以及Windows Data Access Components (WDAC) 6.0版本没有正确验证内部数据结构的内存分配。远程攻击者可借助能够触发整数wrap和缓冲区溢出的超大CacheSize属性执行任意代码。
solution:Upgrade microsoft data_access_components to a higher version than 2.8:sp1,2.8:sp2,and avoid the version 2.8:sp1,2.8:sp2; Upgrade microsoft windows_data_access_components to a higher version than 6.0,and avoid the version 6.0