CVE - CVE-2005-2119

CVE-ID
CVE-2005-2119	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:15056 URL:http://www.securityfocus.com/bid/15056 CERT:TA05-284A URL:http://www.us-cert.gov/cas/techalerts/TA05-284A.html CERT-VN:VU#180868 URL:http://www.kb.cert.org/vuls/id/180868 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf EEYE:AD20051011b URL:http://www.eeye.com/html/research/advisories/AD20051011b.html EEYE:EEYEB20050708 MS:MS05-051 URL:https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051 OSVDB:18828 URL:http://www.osvdb.org/18828 OVAL:oval:org.mitre.oval:def:1071 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071 OVAL:oval:org.mitre.oval:def:1452 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452 OVAL:oval:org.mitre.oval:def:551 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551 SECTRACK:1015037 URL:http://securitytracker.com/id?1015037 SECUNIA:17161 URL:http://secunia.com/advisories/17161 SECUNIA:17172 URL:http://secunia.com/advisories/17172 SECUNIA:17223 URL:http://secunia.com/advisories/17223 SECUNIA:17509 URL:http://secunia.com/advisories/17509 SREASON:73 URL:http://securityreason.com/securityalert/73
Assigning CNA
Microsoft Corporation
Date Record Created
20050702	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050702)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)