NVD

Id
64160  
Name
CVE-2006-5559  
Description
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-27  
Modified Date
2011-07-11  
Seq
2006-5559  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
334690 64160 CVE-2006-5559 http://blogs.technet.com/msrc/archive/2006/10/27/adodb-connection-poc-published.aspx  View
334691 64160 CVE-2006-5559 2629  View
334692 64160 CVE-2006-5559 oval:org.mitre.oval:def:214  View
334693 64160 CVE-2006-5559 http://research.eeye.com/html/alerts/zeroday/20061027.html  View
334694 64160 CVE-2006-5559 1017127  View
334695 64160 CVE-2006-5559 VU#589272  View
334696 64160 CVE-2006-5559 MS07-009  View
334697 64160 CVE-2006-5559 20704  View
334698 64160 CVE-2006-5559 TA07-044A  View
334699 64160 CVE-2006-5559 ADV-2007-0578  View
334700 64160 CVE-2006-5559 ie-adodbconnection-Code-Execution(29837)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58547 JVNDB-2006-000743 Microsoft Data Access Components の ADODB.Connection ActiveX コントロールにおける脆弱性 Microsoft Data Access Components (MDAC) に含まれる ADODB.Connection ActiveX コントロールには、パラメータに対するチェックが不適切であるため、Internet Explorer がクラッシュする、あるいは任意のコードを実行される脆弱性が存在します。 CVE-2006-5559 21661 CVE-2006-5559 64160 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000743.html 2006-10-24 2007-04-01 View