CVE-2002-0695

Microsoft Data Access Components 2.5-2.7 - Remote Code Execution via OpenRowSet Query

Title source: llm
STIX 2.1

Description

Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5372
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9734.php
Various Sources x_refsource_misc
http://www.nextgenss.com/advisories/mssql-ors.txt

Scores

EPSS 0.1695
EPSS Percentile 96.8%

Details

Status published
Products (9)
microsoft/data_access_components 1.5
microsoft/data_access_components 2.0
microsoft/data_access_components 2.1
microsoft/data_access_components 2.1.1.3711.11 ga
microsoft/data_access_components 2.5 (4 CPE variants)
microsoft/data_access_components 2.6 (4 CPE variants)
microsoft/data_access_components 2.7 (2 CPE variants)
microsoft/data_access_components 2.12.4202.3
microsoft/microsoft_data_access_components 2.12.4292.3_ga_clean
Published Aug 12, 2002
Tracked Since Feb 18, 2026