CVE-2006-0034

CVE-2006-0034 is a high-severity vulnerability in Microsoft Distributed Transaction Coordinator with a CVSS 2.0 base score of 7.5. Its EPSS exploit-prediction score of 31% places it in the 98th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-119.

Key facts

• Severity: High (CVSS 2.0 base score 7.5)
• EPSS exploit prediction: 31% (98th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-119
• Affected product: Microsoft Distributed Transaction Coordinator
• Published: 2006-05-10
• Last modified: 2026-06-16

Description

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.

Frequently asked questions

What is CVE-2006-0034?

Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.

How severe is CVE-2006-0034?

CVE-2006-0034 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2006-0034 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 31% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-0034?

CVE-2006-0034 primarily affects Microsoft Distributed Transaction Coordinator. In total, 62 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2006-0034?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2006-0034 published?

CVE-2006-0034 was published on 2006-05-10 and last updated on 2026-06-16.

References

• http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0238.html
• http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0269.html
• http://secunia.com/advisories/20000
• http://securityreason.com/securityalert/863
• http://securitytracker.com/id?1016047
• http://www.eeye.com/html/research/advisories/AD20060509a.html
• http://www.osvdb.org/25335
• http://www.securityfocus.com/archive/1/433430/100/0/threaded
• http://www.securityfocus.com/archive/1/433677/100/0/threaded
• http://www.securityfocus.com/bid/17906
• http://www.vupen.com/english/advisories/2006/1742
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-018
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25559
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1222
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1477
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1908

Affected products (62)

• cpe:2.3:a:microsoft:distributed_transaction_coordinator:*:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*

More vulnerabilities in Microsoft Distributed Transaction Coordinator

• CVE-2006-1184 — Medium (CVSS 5.0): Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003…

All CVEs affecting Microsoft Distributed Transaction Coordinator →

Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities

• CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
• CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
• CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
• CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
• CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

Browse all CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities →