CVE-2005-2119

2005-10-1213:04:00

microsoft

web.nvd.nist.gov

cve-2005-2119

midl_user_allocate

microsoft

distributed transaction coordinator

msdtcprx.dll

memory allocation

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.931

Percentile

99.1%

JSON

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.

Affected configurations

Nvd

Node

microsoftwindows_2000sp4fr

microsoftwindows_2003_serverMatch64-bit

microsoftwindows_2003_serverMatchitanium

microsoftwindows_2003_serverMatchr2

microsoftwindows_2003_serverMatchsp1

microsoftwindows_2003_serverMatchsp1itanium

microsoftwindows_xp64-bit

microsoftwindows_xpsp1tablet_pc

microsoftwindows_xpsp2tablet_pc

VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*
microsoftwindows_2003_server64-bitcpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*
microsoftwindows_2003_serveritaniumcpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*
microsoftwindows_2003_serverr2cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
microsoftwindows_2003_serversp1cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::fr::::
microsoft	windows_2003_server	64-bit	cpe:2.3:o:microsoft:windows_2003_server:64-bit:::::::*
microsoft	windows_2003_server	itanium	cpe:2.3:o:microsoft:windows_2003_server:itanium:::::::*
microsoft	windows_2003_server	r2	cpe:2.3:o:microsoft:windows_2003_server:r2:::::::*
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1:::::::*
microsoft	windows_2003_server	sp1	cpe:2.3:o:microsoft:windows_2003_server:sp1::itanium:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp1:tablet_pc:::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::