Sploitus

Exploit for Windows MDAC RDS.Dataspace ActiveX control vulnerability

saint · 2007-07-16

Exploit Code

MARKDOWN31 lines
## https://sploitus.com/exploit?id=SAINT:BC1DB9AB9516112650D9CE49519F32F1
Added: 07/16/2007  
CVE: CVE-2006-0003  
BID: 17462  
OSVDB: 24517  


### Background

Microsoft Data Access Components (MDAC) enable Universal Data Access in Windows applications deployed over a network. 

### Problem

A cross-zone scripting vulnerability in the RDS.Dataspace ActiveX control in MDAC allows command execution when a user loads a specially crafted web page. 

### Resolution

Apply the update referenced in Microsoft Security Bulletin 06-014. 

### References

http://www.kb.cert.org/vuls/id/234812   


### Limitations

On Windows 2000, MDAC must be installed. 

### Platforms

Windows