• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Visual C++ MFC ISAPI Extension Denial Of Service Vulnerability

Solution:
This issue will reportedly be addressed with the release of Microsoft Visual Studio 6 Service Pack 6, which will be listed at the following page when it is released:
http://msdn.microsoft.com/vstudio/downloads/updates/sp/

This Service Pack is not available at the time of writing. Symantec has also not confirmed whether or not this release will indeed address this issue. If this release does address the issue, it should be noted that ISAPI extensions based on prior versions of MFC will likely need to be recompiled with the updated static libraries.

---
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com <mailto:vuldb@securityfocus.com>.