Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Data_access_components | Microsoft | 1.5 (including) | 1.5 (including) |
| Data_access_components | Microsoft | 2.0 (including) | 2.0 (including) |
| Data_access_components | Microsoft | 2.1 (including) | 2.1 (including) |
| Data_access_components | Microsoft | 2.1.1.3711.11-ga (including) | 2.1.1.3711.11-ga (including) |
| Data_access_components | Microsoft | 2.5 (including) | 2.5 (including) |
| Data_access_components | Microsoft | 2.5-gold (including) | 2.5-gold (including) |
| Data_access_components | Microsoft | 2.5-sp1 (including) | 2.5-sp1 (including) |
| Data_access_components | Microsoft | 2.5-sp2 (including) | 2.5-sp2 (including) |
| Data_access_components | Microsoft | 2.6 (including) | 2.6 (including) |
| Data_access_components | Microsoft | 2.6-gold (including) | 2.6-gold (including) |
| Data_access_components | Microsoft | 2.6-sp1 (including) | 2.6-sp1 (including) |
| Data_access_components | Microsoft | 2.6-sp2 (including) | 2.6-sp2 (including) |
| Data_access_components | Microsoft | 2.7 (including) | 2.7 (including) |
| Data_access_components | Microsoft | 2.7-gold (including) | 2.7-gold (including) |
| Data_access_components | Microsoft | 2.12.4202.3 (including) | 2.12.4202.3 (including) |