Vulnerability in RDS.Dataspace ActiveX Control in Microsoft Data Access Components
CVE-2006-0003

Currently unrated

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
12 April 2006

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC๐ŸŸฃ EPSS 91%

What is CVE-2006-0003?

The RDS.Dataspace ActiveX control in ActiveX Data Objects (ADO), distributed with Microsoft Data Access Components (MDAC) versions 2.7 and 2.8, has an unspecified vulnerability. This flaw can be exploited by remote attackers to execute arbitrary code on the affected system via unknown attack vectors, potentially compromising the integrity and confidentiality of the system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

EPSS Score

91% chance of being exploited in the next 30 days.

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.