Jet Red Database Engine
by Microsoft
CVEs (67)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-0879 | Hig | 0.51 | 7.8 | 0.10 | Apr 9, 2019 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877. | ||
| CVE-2019-0877 | Hig | 0.51 | 7.8 | 0.05 | Apr 9, 2019 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879. | ||
| CVE-2021-42293 | Med | 0.42 | 6.5 | 0.03 | Dec 15, 2021 | Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability | ||
| CVE-2000-0325 | 0.03 | — | 0.04 | Aug 20, 1999 | The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability. | |||
| CVE-2008-1092 | 0.02 | — | 0.26 | Mar 25, 2008 | Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as… | |||
| CVE-2004-0197 | 0.02 | — | 0.26 | Jun 1, 2004 | Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query. | |||
| CVE-2000-0323 | 0.00 | — | 0.06 | Jul 28, 1999 | The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability. |
- risk 0.51cvss 7.8epss 0.10
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.
- risk 0.51cvss 7.8epss 0.05
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0879.
- risk 0.42cvss 6.5epss 0.03
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
- CVE-2000-0325Aug 20, 1999risk 0.03cvss —epss 0.04
The Microsoft Jet database engine allows an attacker to execute commands via a database query, aka the "VBA Shell" vulnerability.
- CVE-2008-1092Mar 25, 2008risk 0.02cvss —epss 0.26
Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as…
- CVE-2004-0197Jun 1, 2004risk 0.02cvss —epss 0.26
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
- CVE-2000-0323Jul 28, 1999risk 0.00cvss —epss 0.06
The Microsoft Jet database engine allows an attacker to modify text files via a database query, aka the "Text I-ISAM" vulnerability.
Page 4 of 4