CVE-2006-0003
CVE-2006-0003
Vexday Risk Score
82Fix now
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 82.5%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado
Lifecycle
11 Apr 2006Metasploit module available
12 Apr 2006Published on NVD
20 Sep 2010Public PoC
Weaponization speed
1622 daysto first PoC
Recommendation: Patch as soon as possible — active exploitation confirmed.
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencewww.exploit-db.com/exploits/2164unverifiedexploitdbwww.exploit-db.com/exploits/16561unverifiedcve_referencewww.exploit-db.com/exploits/2052unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014http://secunia.com/advisories/19583http://secunia.com/advisories/20719http://securitytracker.com/id?1015894https://exchange.xforce.ibmcloud.com/vulnerabilities/25006https://exchange.xforce.ibmcloud.com/vulnerabilities/29915https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778https://www.exploit-db.com/exploits/2052