This application requires Javascript for optimal performance.

MS.Windows.MSDTC.Heap.Overflow

Alias(es)

Windows.MSDTC.Bind, Windows.MSDTC.BuildContextW.Little.Invalid.UUID.Size, Windows.MSDTC.BuildContextW.Little.Object.Invalid.UUID.Size, Windows.MSDTC.BuildContextW.Little.Invalid.GUID.Size, Windows.MSDTC.BuildContextW.Little.Object.Invalid.GUID.Size, Windows.MSDTC.BuildContext.Little.Object.Fifth.HeapOverflow, Windows.MSDTC.BuildContext.Little.Fifth.HeapOverflow, Windows.MSDTC.BuildContextW.Little.Fifth.HeapOverflow, Windows.MSDTC.BuildContextW.Little.Object.Fifth.HeapOverflow, Windows.MSDTC.BuildContextW.Little.Object.Memory.Corruption, Windows.MSDTC.BuildContextW.Little.Memory.Corruption

Release Date

May 11, 2006

Severity

medium

Impact

System compromise

Description

This indicates an attack attempt against a memory-corruption vulnerability in
Microsoft Distributed Transaction Coordinator (MSDTC).

The vulnerability is caused by an error when the vulnerable software handles
parameters passed to vulnerable functions in MSDTCPRX.DLL. It allows a remote attacker to execute arbitrary code via sending a crafted RPC request.

Affected Products

Windows 2000 Server SP0 - SP4 (Remote Execution)
Windows XP SP1 (local privilege elevation only)
Windows 2003 Server (local privilege elevation only)

Recommended Actions

Refer to the vendor's web site for the suggested workground:
http://www.microsoft.com/technet/security/Bulletin/MS05-051.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2006-0034
CVE-2006-1184
CVE-2005-2119

Reference/s

http://www.securityfocus.com/bid/17906 (BugTraq)
http://technet.microsoft.com/en-us/security/bulletin/MS06-018.mspx (MS-ID)
http://technet.microsoft.com/en-us/security/bulletin/MS05-051.mspx (MS-ID)
http://www.securityfocus.com/bid/17905 (BugTraq)
http://www.securityfocus.com/bid/15056 (BugTraq)

Reference: VID-11896