CVE-2005-2119

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 35.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-11 · updated 2026-06-16

Description

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: 64-bit, itanium, r2, sp1
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/17161
http://secunia.com/advisories/17172
http://secunia.com/advisories/17223
http://secunia.com/advisories/17509
http://securityreason.com/securityalert/73
http://securitytracker.com/id?1015037
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
http://www.eeye.com/html/research/advisories/AD20051011b.html
http://www.kb.cert.org/vuls/id/180868
http://www.osvdb.org/18828
http://www.securityfocus.com/bid/15056
http://www.us-cert.gov/cas/techalerts/TA05-284A.html

Get alerted when CVE-2005-2119 or the next vulnerability affects your stack