Microsoft Malformed Web Form Submission Vulnerability Patch (IIS 5.0)

By Microsoft Free

Download.com has removed the direct-download link and offers this page for informational purposes only.

Download.com has chosen not to provide a direct-download link for this product and offers this page for informational purposes only.

Developer's Description

This patch eliminates a security vulnerability in a component that ships as part of Microsoft Internet Information Server. The vulnerability could potentially allow an attacker to prevent an affected Web server from providing useful service.

The FrontPage Server Extensions (FPSE) ship with and are installed by default as part of IIS 4.0 and 5.0. The most familiar FPSE functions allow Web site and content management; however, FPSE also provides browse-time support functions. Among the functions included in the latter category are ones that help process Web forms that have been submitted by a user. A vulnerability exists in one of these functions. If a malicious user levied a specially-malformed form submission to an affected server, it would cause the IIS service to fail. The vulnerability does not provide the opportunity to misuse any of the FPSE administrative or content management functions.

To resume normal operation on an IIS 4.0 server, the operator would need to restart the service. In contrast, if an IIS 5.0 server were attacked via this vulnerability, the IIS service would, by default, automatically restart almost immediately. Although any Web sessions that were in progress at the time of the attack would be lost, the server would be able to accept new connections as soon as the service was restarted. FPSE is installed by default as part of IIS 4.0 and 5.0, but, in keeping with best practices, Microsoft recommends that they be disabled if not needed.

Full Specifications

What's new in version MS00-100


Release December 5, 2008
Date Added January 9, 2001
Version MS00-100

Operating Systems

Operating Systems Windows, Windows 2000
Additional Requirements Windows 2000


Total Downloads 25,101
Downloads Last Week 0
Report Software

Related Software

AVG Antivirus Business Edition

Free to try
AVG Antivirus Business Edition

Pulse Secure for Windows 10

Pulse Secure for Windows 10



Net Monitor for Employees Professional

Free to try
Net Monitor for Employees Professional

User Reviews

8 User Votes
5 Star
4 Star
3 Star
2 Star
1 Star

Get the best price on everything

Shop your favorite products and we’ll find the best deal with a single click. Designed to make shopping easier.