Article ID: 329086 - View products that this article applies to.
This article was previously published under Q329086
Microsoft has released an update for FrontPage 2002 Server Extensions. This update fixes a specific security issue with the FrontPage 2002 Server Extensions.
This article describes how to download and install the FrontPage Server Extensions update.
How to Obtain and Download the UpdateIMPORTANT: Microsoft requires that you download and install the FrontPage 2002 Server Extensions Security Update: January 29, 2002, before you install the update described in this article. For additional information about how to download and install the FrontPage 2002 Server Extensions Security Update that was released on January 29, 2002, click the article number below to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/317296/EN-US/ )Overview of the FrontPage 2002 Server Extension Update
How to Download and Install the UpdateTo obtain the FrontPage 2002 Server Extensions Security Update: September 25, 2002, visit the following Microsoft Web site:
http://download.microsoft.com/download/FrontPage2002/fpse1002/1/W98NT42KMeXP/EN-US/fpse1002.exeWhen you receive a prompt to download or save the file, select to save the file to your desktop. To install the update, double-click the Fpse1002.exe file on your desktop, and then follow the instructions for the installation.
How to Determine Whether the Public Update Is InstalledThe following files are updated by the FrontPage Server Extensions update:
Date Time Version Size File Name Platform ----------------------------------------------------------------- 02-Aug-2002 13:53 10.0.4330.0 1,382,984 Fp5awel.dll x86
Issues Fixed by the Update
A Chunked Request Sent to the Shtml.dll File Causes a Heap OverflowA specially malformed chunked request sent to the FrontPage Server Extensions Smart HTML Interpreter (Shtml.dll) can cause a heap overflow in Microsoft Internet Information Server (IIS). For additional information about security vulnerability, click the article number below to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/324096/EN-US/ )MS02-053: Request to Smart HTML Interpreter Could Monopolize Web Server CPU Resources