HTTP: Microsoft Data Access Components Cachesize Heap Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Data Access Components. A successful attack can lead to a heap overflow and arbitrary remote code execution within the context of the server.

Extended Description

Microsoft Data Access Components (MDAC) are prone to a heap-based buffer-overflow vulnerability because they fail to properly bounds-check user-supplied data. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Microsoft data_access_components_(mdac)

References

BugTraq: 54308

CVE: CVE-2012-1891

Short Name

HTTP:STC:IE:MDAC-CACHESIZE-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Data Access Components Cachesize Heap Overflow

Extended Description

Affected Products

References

Found a potential security threat?