CVE:CVE-2012-1891
CNNVD:CNNVD-201207-100
Microsoft Data Access Components (MDAC)是一套用于在Windows平台上提供数据库连接的组件。
Microsoft Data Access Components (MDAC) 2.8 SP1、SP2和Windows Data Access Components (WDAC) 6.0版本中存在基于堆的缓冲区溢出漏洞。远程攻击者可利用该漏洞通过特制的触发访问内存中未初始化对象的XML数据执行任意代码，又名‘ADO Cachesize堆溢出RCE漏洞’。
solution:Upgrade microsoft data_access_components to a higher version than 2.8:sp1,2.8:sp2,and avoid the version 2.8:sp1,2.8:sp2; Upgrade microsoft windows_data_access_components to a higher version than 6.0,and avoid the version 6.0