NVD

Id
58778  
Name
CVE-2006-0034  
Description
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-09  
Modified Date
2011-10-17  
Seq
2006-0034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301742 58778 CVE-2006-0034 20060509 [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow  View
301743 58778 CVE-2006-0034 20060510 Microsoft MSDTC NdrAllocate Validation Vulnerability  View
301744 58778 CVE-2006-0034 oval:org.mitre.oval:def:1222  View
301745 58778 CVE-2006-0034 oval:org.mitre.oval:def:1477  View
301746 58778 CVE-2006-0034 oval:org.mitre.oval:def:1908  View
301747 58778 CVE-2006-0034 863  View
301748 58778 CVE-2006-0034 1016047  View
301749 58778 CVE-2006-0034 http://www.eeye.com/html/research/advisories/AD20060509a.html  View
301750 58778 CVE-2006-0034 MS06-018  View
301751 58778 CVE-2006-0034 20060509 [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow  View
301752 58778 CVE-2006-0034 20060511 Microsoft MSDTC NdrAllocate Validation Vulnerability  View
301753 58778 CVE-2006-0034 17906  View
301754 58778 CVE-2006-0034 ADV-2006-1742  View
301755 58778 CVE-2006-0034 msdtc-network-message-dos(25559)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58071 JVNDB-2006-000267 Microsoft Windows の CRpcIoManagerServer::BuildContext() 関数におけるヒープオーバーフローの脆弱性 ------------ CVE-2006-0034 16136 CVE-2006-0034 58778 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000267.html 2006-05-09 2007-04-01 View