Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows…

published 2012-07-10 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-1901

cvss: 9.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 29.4%; EPSS 29.4% chance of exploitation in 30 days, percentile 98%
public exploits: 0; none known

Heap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows Data Access Components (WDAC) 6.0 allows remote attackers to execute arbitrary code via crafted XML data that triggers access to an uninitialized object in memory, aka "ADO Cachesize Heap Overflow RCE Vulnerability."

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: total
Assessed: 2 y ago (2024-10-17)

Exploit prediction

29.41% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

microsoft data_access_components
microsoft windows_data_access_components

Classification

Weakness

CWE-908 Use of Uninitialized Resource
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

docs.microsoft.com /en-us/security-updates/securitybulletins/2012/ms12-045
vendor-advisory
us-cert.gov /cas/techalerts/TA12-192A.html
third-party-advisory, us-government-resource
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14783
vdb-entry, signature

Sources

CVE List CVE-2012-1891
NVD CVE-2012-1891

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary