5

CVE-2005-2119

EPSS 35.5%
Veröffentlicht 12.10.2005 13:04:00
Zuletzt bearbeitet 16.06.2026 22:14:18
Erkennungen
Login

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 19

NVD 9 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000 Update sp4 Lang fr

Microsoft ≫ Windows 2003 Server Version 64-bit

Microsoft ≫ Windows 2003 Server Version itanium

Microsoft ≫ Windows 2003 Server Version r2

Microsoft ≫ Windows 2003 Server Version sp1

Microsoft ≫ Windows 2003 Server Version sp1 Edition itanium

Microsoft ≫ Windows Xp Edition 64-bit

Microsoft ≫ Windows Xp Update sp1 Edition tablet_pc

Microsoft ≫ Windows Xp Update sp2 Edition tablet_pc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	35.5%	0.983

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/17223

http://secunia.com/advisories/17172

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

http://secunia.com/advisories/17509

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

US Government Resource

http://secunia.com/advisories/17161

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051

http://securitytracker.com/id?1015037

http://securityreason.com/securityalert/73

http://www.eeye.com/html/research/advisories/AD20051011b.html

http://www.kb.cert.org/vuls/id/180868

US Government Resource

http://www.osvdb.org/18828

http://www.securityfocus.com/bid/15056

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551

https://nvd.nist.gov/vuln/detail/CVE-2005-2119

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2119

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2119

EUVD