CVE-2006-0003
EXPLOITEDMicrosoft Data Access Components 2.7-2.8 - Remote Code Execution via RDS.Dataspace ActiveX Control
Title source: llmExploitation Summary
CVE-2006-0003 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including H D Moore, redsand.
AI-analyzed exploit summary This is a Metasploit module that exploits a vulnerability in Internet Explorer by abusing vulnerable ActiveX objects to achieve remote code execution. It generates an HTML page that attempts to create various ActiveX objects and download/execute a payload.
Description
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
Exploits (3)
This is a Metasploit module that exploits a vulnerability in Internet Explorer by abusing vulnerable ActiveX objects to achieve remote code execution. It generates an HTML page that attempts to create various ActiveX objects and download/execute a payload.
This exploit leverages CVE-2006-0003 (MS06-014) to achieve remote code execution via a crafted HTML file with VBScript. It downloads and executes a payload from a specified URL using ADODB.Stream and Shell.Application objects.
This is a functional Metasploit exploit module targeting CVE-2006-0003, which abuses vulnerable ActiveX objects in Internet Explorer to achieve remote code execution. It uses multiple CLSIDs to create objects and execute arbitrary commands via WScript.Shell.