CVE-2006-0034
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for...
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
- Record
CVE-2006-0034- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
- Record
CVE-2006-0034- Updated
- 2026-11-02
EUVDEUVD-2006-0042 No score
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
- Record
EUVD-2006-0042- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pgm7-46cc-q6hq No score
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for...
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
- Record
GHSA-pgm7-46cc-q6hq- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0034 is a high vulnerability (CVSS 7.5) in Microsoft Distributed Transaction Coordinator, published May 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 31.7%, the 98th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1222
securityfocus.com/archive/1/433677/100/0/threaded
securitytracker.com/id?1016047
Show 12 moreShow less
osvdb.org/25335
exchange.xforce.ibmcloud.com/vulnerabilities/25559
eeye.com/html/research/advisories/AD20060509a.html
securityreason.com/securityalert/863
vupen.com/english/advisories/2006/1742
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018
secunia.com/advisories/20000
nvd.nist.gov/vuln/detail/CVE-2006-0034
github.com/advisories/GHSA-pgm7-46cc-q6hq