Article ID: 2620191 - Last Review: October 1, 2011 - Revision: 1.0

FIX: Security update 2520426 causes a regression on a computer that is running Forefront Threat Management Gateway Client

View products that this article applies to.
System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You have Microsoft Forefront Threat Management Gateway Client installed on a client computer that is running a Windows operating system.
  • You install security update 2520426 on the client computer.
  • You do one of the following things:
    • You run Microsoft ActiveSync for a device such as a Windows Embedded CE-based device.
    • You run an application that calls the NSPLookupServiceNext() function, and the function calls the NSPLookupServiceBegin() function that contains a dwControlFlags parameter of LUP_RETURN_BLOB.
In this scenario, ActiveSync does not work, or the application fails during name resolution.
Back to the top

CAUSE

This problem occurs because of a regression that is introduced by security update MS11-040.
Back to the top

RESOLUTION

To resolve this problem, install the hotfix rollup that is described in the following Microsoft Knowledge Base article:
2616324  (http://support.microsoft.com/kb/2616324/ ) A hotfix rollup is available for Forefront Threat Management Gateway Client

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top

REFERENCES

For more information about security update 2520426, click the following article number to view the article in the Microsoft Knowledge Base:
2520426  (http://support.microsoft.com/kb/2520426/ ) MS11-040: Vulnerability in Threat Management Gateway Firewall Client could cause remote code execution: June 14, 2011
For more information about the NSPLookupServiceNext() function, visit the following Microsoft Developer Network (MSDN) website:
NSPLookupServiceNext function (http://msdn.microsoft.com/en-us/library/ms740018(VS.85).aspx)
For more information about the NSPLookupServiceBegin() function, visit the following MSDN website:
NSPLookupServiceBegin function (http://msdn.microsoft.com/en-us/library/ms739988(v=VS.85).aspx)
For more information about Firewall client computers, visit the following Microsoft TechNet website:
About firewall client computers (http://technet.microsoft.com/en-us/library/dd897009.aspx)
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684  (http://support.microsoft.com/kb/824684/ ) Description of the standard terminology that is used to describe Microsoft software updates

Back to the top
APPLIES TO
  • Microsoft Forefront Threat Management Gateway 2010 Enterprise
  • Microsoft Forefront Threat Management Gateway 2010 Standard
Back to the top
Keywords: 
kbfix kbbug kbexpertiseinter kbsurveynew KB2620191
Back to the top