CVEvulnerability
CVE-2011-0026
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, allows remote attackers to execute arbitrary code via a long string in the Data Source Name (DSN) and a crafted szDSN argument, which bypasses a signed comparison and leads to a buffer overflow, aka "DSN Overflow Vulnerability."
Affected configurations
• microsoft data access components 2.8
• microsoft windows data access components 6.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/70443 osvdb.org
- http://secunia.com/advisories/42804 secunia.com
- http://support.avaya.com/css/P8/documents/100124846 support.avaya.com
- http://www.securityfocus.com/bid/45695 www.securityfocus.com
- http://www.securitytracker.com/id?1024947 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource
- http://www.vupen.com/english/advisories/2011/0075 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-001/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12333 oval.cisecurity.org
- http://osvdb.org/70443 osvdb.org
- http://secunia.com/advisories/42804 secunia.com
- http://support.avaya.com/css/P8/documents/100124846 support.avaya.com
- http://www.securityfocus.com/bid/45695 www.securityfocus.com
- http://www.securitytracker.com/id?1024947 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA11-011A.html US Government Resource
- http://www.vupen.com/english/advisories/2011/0075 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-11-001/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-002 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12333 oval.cisecurity.org