CVE Feed

    Dashboard / CVE / CVE-2006-1184

    CVE-2006-1184

    Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.

    Published:May 9, 2006
    Last Modified:Apr 16, 2026
    EPS:May 9, 2006
    EPSS Score:0.37727
    CVSS Score:5

    Affected Products

    Vendor
    Microsoft
    Product
    Distributed Transaction Coordinator
    Vendor
    Microsoft
    Product
    Windows 2000
    Vendor
    Microsoft
    Product
    Windows 2003 Server
    Vendor
    Microsoft
    Product
    Windows Nt
    Vendor
    Microsoft
    Product
    Windows Xp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://secunia.com/advisories/20000
    http://securityreason.com/securityalert/864
    http://securitytracker.com/id?1016047
    http://www.eeye.com/html/research/advisories/AD20060509b.html
    http://www.osvdb.org/25336
    http://www.securityfocus.com/archive/1/433425/100/0/threaded
    http://www.securityfocus.com/bid/17905
    http://www.vupen.com/english/advisories/2006/1742
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25558
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1295
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1779
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1912
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1990
    http://secunia.com/advisories/20000
    http://securityreason.com/securityalert/864
    http://securitytracker.com/id?1016047
    http://www.eeye.com/html/research/advisories/AD20060509b.html
    http://www.osvdb.org/25336
    http://www.securityfocus.com/archive/1/433425/100/0/threaded
    http://www.securityfocus.com/bid/17905
    http://www.vupen.com/english/advisories/2006/1742
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25558
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1295
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1779
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1912
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1990

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High