CVE-2005-2119
Microsoft Distributed Transaction Coordinator - Memory Corruption
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-2119. PoCs published by Swan, darkeagle.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2005-1978, targeting a vulnerability in the Microsoft Distributed Transaction Coordinator (MSDTC). The exploit attempts to trigger a memory corruption issue via crafted network packets, though the author notes it is unreliable and primarily results in a denial-of-service (DoS) condition.
Description
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
Exploits (2)
This is a proof-of-concept exploit for CVE-2005-1978, targeting a vulnerability in the Microsoft Distributed Transaction Coordinator (MSDTC). The exploit attempts to trigger a memory corruption issue via crafted network packets, though the author notes it is unreliable and primarily results in a denial-of-service (DoS) condition.
This exploit targets CVE-2005-2119, a vulnerability in the Microsoft Distributed Transaction Coordinator (MSDTC) service. It sends malformed packets to trigger a buffer overflow, potentially leading to remote code execution on Windows 2000 systems.