Beveiligingsadvies

CVE-2005-2119

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2005-10-11 04:00:00

Laatst bijgewerkt 2024-08-07 22:15:37

Toegewezen door microsoft

CVSS-score geen score

Status PUBLISHED

Beschrijving

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.

← Alle CVE's bekijken Bekijk op cve.org ↗