{"id":"CVE-2006-0003","aliases":["EUVD-2006-0011","GHSA-74jf-rm92-m939"],"status":"published","title":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX...","description":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.82789,"percentile":0.99673,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-04-12T00:00:00Z","modified":"2026-06-16T22:19:41Z","exploits":[{"source":"exploitdb","id":"EDB-16561","title":"Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)","type":"remote","platform":"windows","date":"2010-09-20","verified":true,"url":"https://www.exploit-db.com/exploits/16561"},{"source":"exploitdb","id":"EDB-2052","title":"Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)","type":"remote","platform":"windows","date":"2006-07-21","verified":true,"url":"https://www.exploit-db.com/exploits/2052"},{"source":"exploitdb","id":"EDB-2164","title":"Microsoft Internet Explorer - 'MDAC' Remote Code Execution (MS06-014) (Metasploit) (2)","type":"remote","platform":"windows","date":"2006-08-10","verified":true,"url":"https://www.exploit-db.com/exploits/2164"},{"source":"metasploit","id":"exploit/windows/browser/ie_createobject","title":"MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution","type":"exploit","platform":"Windows","date":"2006-04-11","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/ie_createobject"}],"products":[{"vendor":"microsoft","product":"data_access_components"}],"references":[{"url":"http://www.vupen.com/english/advisories/2006/2452","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/475108/100/100/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/487216/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/487219/100/200/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/475104/100/100/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/19583","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/01-e.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1323","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/20797","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://securitytracker.com/id?1015894","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25006","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1511","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-101A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS06-013_e/index-e.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/17462","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/2164","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1778","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/2052","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://secunia.com/advisories/20719","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1204","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/234812","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-014","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/1319","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/475490/100/100/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.osvdb.org/24517","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/475118/100/100/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1742","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0003"},{"url":"https://github.com/advisories/GHSA-74jf-rm92-m939"}],"sources":{"cve":[{"id":"CVE-2006-0003","description":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.","status":"published","published":"2006-04-12T00:00:00Z","modified":"2024-08-07T16:18:20.629Z","updated_at":"2026-11-02T14:33:52.947472Z"}],"euvd":[{"id":"EUVD-2006-0011","description":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.","status":"published","published":"2006-04-12T00:00:00Z","modified":"2024-08-07T16:18:20Z","updated_at":"2026-11-03T01:16:11.812011Z"}],"ghsa":[{"id":"GHSA-74jf-rm92-m939","title":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX...","description":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.","status":"published","published":"2022-05-01T06:37:01Z","modified":"2023-01-31T05:00:26Z","updated_at":"2026-11-02T14:47:51.48849Z"}],"nvd":[{"id":"CVE-2006-0003","description":"Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.","status":"published","published":"2006-04-12T00:02:00Z","modified":"2026-06-16T22:19:41.453Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:02.433957Z"}]}}