Lucene search

K
cve[email protected]CVE-2006-1184
HistoryMay 10, 2006 - 2:14 a.m.

CVE-2006-1184

2006-05-1002:14:00
NVD-CWE-Other
web.nvd.nist.gov
44
msdtc
windows nt 4.0
windows 2000 sp4
windows xp sp1
windows xp sp2
windows server 2003
denial of service
cve-2006-1184
vulnerability

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.144 Low

EPSS

Percentile

95.7%

Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.

6.4 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.144 Low

EPSS

Percentile

95.7%