CVE - CVE-2005-2119

CVE-ID
CVE-2005-2119	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
EEYE:EEYEB20050708 EEYE:AD20051011b URL:http://www.eeye.com/html/research/advisories/AD20051011b.html CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf MS:MS05-051 URL:http://www.microsoft.com/technet/security/bulletin/MS05-051.mspx CERT:TA05-284A URL:http://www.us-cert.gov/cas/techalerts/TA05-284A.html CERT-VN:VU#180868 URL:http://www.kb.cert.org/vuls/id/180868 BID:15056 URL:http://www.securityfocus.com/bid/15056 OSVDB:18828 URL:http://www.osvdb.org/18828 OVAL:oval:org.mitre.oval:def:1071 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1071 OVAL:oval:org.mitre.oval:def:1452 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1452 OVAL:oval:org.mitre.oval:def:551 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:551 SECTRACK:1015037 URL:http://securitytracker.com/id?1015037 SECUNIA:17161 URL:http://secunia.com/advisories/17161 SECUNIA:17172 URL:http://secunia.com/advisories/17172 SECUNIA:17223 URL:http://secunia.com/advisories/17223 SECUNIA:17509 URL:http://secunia.com/advisories/17509 SREASON:73 URL:http://securityreason.com/securityalert/73
Date Entry Created
20050702	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050702)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Common Vulnerabilities and Exposures

CVE-2005-2119