$ cve CVE-2005-2119 JSON

CVE-2005-2119 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 35.5% (pctl 98)

Patch early

A public exploit exists.

Description

The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS	35.5% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-10-12
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - DTC Remote (MS05-051) (2)	2005-12-01
exploit-db	Microsoft Windows - MSDTC Service Remote Memory Modification (PoC) (MS05-051)	2005-11-27

References

→ the Explorer · watch your stack · NVD