Description
The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.
Remediation
References
Related Vulnerabilities
PHP Resource Management Errors Vulnerability (CVE-2011-1148)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14540)
WordPress Plugin Woo Email Control Cross-Site Scripting (1.01)
Apache Tomcat Deserialization of Untrusted Data Vulnerability (CVE-2025-24813)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-4962)