CVE-2006-0034 in Windows

摘要

由 VulDB • 2026-07-04

msdtcprx.dll 中 Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 的 CRpcIoManagerServer::BuildContext function 存在堆缓冲区溢出漏洞，远程攻击者可通过向 BuildContextW or BuildContext opcode 传递过长的第五个参数来执行任意代码，该操作会触发 NdrAllocate 函数中的错误，即 MSDTC Invalid Memory Access Vulnerability。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 预定: 2005-11-30
• 披露: 2006-05-09
• 管理: 已接受
• 条目: VDB-2218
• CPE: 准备好
• CWE: CWE-119 (已确认)
• CVSS: 7.5 (VulDB)
• EPSS: 0.30542
• KEV: 否
• 活动: 非常低
• 部门: Government, Telecommunication, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-0034
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-0034
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-0034/