Unrated severityNVD Advisory· Published Oct 12, 2005· Updated Jun 16, 2026
CVE-2005-2119
CVE-2005-2119
Description
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*
Patches
Vulnerability mechanics
References
16- www.kb.cert.org/vuls/id/180868nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA05-284A.htmlnvdUS Government Resource
- secunia.com/advisories/17161nvd
- secunia.com/advisories/17172nvd
- secunia.com/advisories/17223nvd
- secunia.com/advisories/17509nvd
- securityreason.com/securityalert/73nvd
- securitytracker.com/idnvd
- support.avaya.com/elmodocs2/security/ASA-2005-214.pdfnvd
- www.eeye.com/html/research/advisories/AD20051011b.htmlnvd
- www.osvdb.org/18828nvd
- www.securityfocus.com/bid/15056nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1071nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1452nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A551nvd
News mentions
0No linked articles in our index yet.