Description
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
References
- oval:org.mitre.oval:def:1912 vdb-entry signature
- http://www.eeye.com/html/research/advisories/AD20060509b.html
- 25336 vdb-entry
- 1016047 vdb-entry
- 17905 vdb-entry
- 20060509 [EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service mailing-list
- oval:org.mitre.oval:def:1779 vdb-entry signature
- oval:org.mitre.oval:def:1295 vdb-entry signature
- msdtc-message-dos(25558) vdb-entry
- 864 third-party-advisory
- oval:org.mitre.oval:def:1990 vdb-entry signature
- ADV-2006-1742 vdb-entry
- MS06-018 vendor-advisory
- 20000 third-party-advisory