Denial of Service Vulnerability in Microsoft Distributed Transaction Coordinator

CVE-2006-1184

Summary

The Microsoft Distributed Transaction Coordinator (MSDTC) is susceptible to a denial of service attack that may be exploited by remote attackers. By sending a specially crafted BuildContextW request featuring a large UuidString or GuidIn, attackers can trigger an out-of-bounds memory access, resulting in a system crash. This vulnerability affects various versions of Windows, including NT 4.0, 2000 SP4, XP SP1, XP SP2, and Server 2003, posing a significant risk of service disruption.

References