CVE-2003-0353

high · 7.5

Buffer overflow in a component of SQL-DMO for Microsoft Data Access Components (MDAC) 2.5 through 2.7 allows remote attackers to execute arbitrary code via a long response to a broadcast request to UDP port 1434.

7.5

CVSS

21.7%

EPSS (exploit prob.)

98th

EPSS percentile

2003-08-27

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	data_access_components	1.5
microsoft	data_access_components	2.0
microsoft	data_access_components	2.1
microsoft	data_access_components	2.1.1.3711.11
microsoft	data_access_components	2.5
microsoft	data_access_components	2.5
microsoft	data_access_components	2.5
microsoft	data_access_components	2.5
microsoft	data_access_components	2.6
microsoft	data_access_components	2.6
microsoft	data_access_components	2.6
microsoft	data_access_components	2.6
microsoft	data_access_components	2.7
microsoft	data_access_components	2.7
microsoft	data_access_components	2.12.4202.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0353