CVE-2006-5559

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 43.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-10-27 · updated 2026-06-16
Weakness: CWE-20

Description

The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments.

Affected products

Microsoft Data Access Components: 2.5-sp3, 2.8-sp1, 2.8, 2.7-sp1

References

http://blogs.technet.com/msrc/archive/2006/10/27/adodb-connection-poc-published.aspx
http://research.eeye.com/html/alerts/zeroday/20061027.html
http://secunia.com/advisories/22452
http://securitytracker.com/id?1017127
http://www.kb.cert.org/vuls/id/589272
http://www.osvdb.org/31882
http://www.securityfocus.com/bid/20704
http://www.us-cert.gov/cas/techalerts/TA07-044A.html
http://www.vupen.com/english/advisories/2007/0578
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-009
https://exchange.xforce.ibmcloud.com/vulnerabilities/29837
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A214

Get alerted when CVE-2006-5559 or the next vulnerability affects your stack