Icon of program: Microsoft Data Access Com…

Microsoft Data Access Components 2.5 Unchecked Buffer Vulnerability for Windows

Download now

Used Microsoft Data Access Components 2.5 Unchecked Buffer Vulnerability for Windows?

Editors’ Review

Download.com staff
This review discusses a security vulnerability in Microsoft Data Access Components impacting SQL Server's OpenRowSet command, allowing potential database control by attackers.

  • Pros

    • Provides supporting technologies for database access
    • Underlying support for T-SQL OpenRowSet command

  • Cons

    • Unchecked buffer vulnerability in MDAC functions
    • Exploitable by attackers for database control
    • Potential for operating system administrative privileges
Icon of program: Microsoft Data Access Com…

Microsoft Data Access Components 2.5 Unchecked Buffer Vulnerability for Windows

Download now

Used Microsoft Data Access Components 2.5 Unchecked Buffer Vulnerability for Windows?

Explore More

Full Specifications

GENERAL
Release
Latest update
Version
MS02-040
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows 10
  • Windows 95
  • Windows 98
  • Windows NT
Additional Requirements
Windows 95/98/NT, Microsoft Data Access Components 2.5 Service Pack 2
POPULARITY
Total Downloads
6,892
Downloads Last Week
9
Report Software

Program available in other languages

Last Updated

User Reviews

1/5

1 User Votes

Developer’s Description

By Microsoft
Prevent a malicious user from taking control of your SQL Server database.
The Microsoft Data Access Components (MDAC) provide a number of supporting technologies for accessing and using databases. Included among these functions is the underlying support for the T-SQL OpenRowSet command. A security vulnerability results because the MDAC functions underlying OpenRowSet contain an unchecked buffer.

An attacker who successfully exploited it would be able to take action with all the privileges of an affected SQL Server. At a minimum, this would grant the attacker complete control over the database, and potentially could grant administrative privileges at the operating system level as well.

Download.com
Your review for Microsoft Data Access Components 2.5 Unchecked Buffer Vulnerability