FIX: Heap corruption occurs when a module calls the InsertEntityBody method in IIS 7.5

Article ID: 2646886 - View products that this article applies to.
Expand all | Collapse all

On This Page

Symptoms

Consider the following scenario:
  • You create an HTTP module that calls the IHttpRequest::InsertEntityBody method to insert a new entity body into an existing HTTP request body.
  • You register the module on a computer that is running Internet Information Services (IIS) 7.5, and then you enable the module.
  • You restart the IIS service, and then a client request is made to a webpage that is hosted on the computer.
In this scenario, heap corruption occurs, and the module does not work.

Cause

The issue occurs because of an access violation that occurs when the InsertEntityBody method tries to read the buffer from a freed memory location in the IIS service.

Resolution

Hotfix information

The following files are available for download from the Microsoft Download Center:
Collapse this imageExpand this image
Download
Download the hotfix package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

You must have IIS 7.5 installed to apply this hotfix. This hotfix can be installed on a computer that is running one of the following operating systems:
  • Windows 7
  • Windows 7 Service Pack 1 (SP1)
  • Windows Server 2008 R2
  • Windows Server 2008 R2 Service Pack 1 (SP1)

Restart requirement

You must restart the computer if IIS is running when you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The English (United States) version of this hotfix uses a Microsoft Windows Installer package to install the hotfix. The dates and the times for these files are listed in Coordinated Universal Time (UTC) in the following table. When you view the file information, the date is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows 7 and Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Collapse this tableExpand this table
    VersionProductMilestoneService branch
    7.5.7600.17xxxMicrosoft Internet Information Services 7.5RTMGDR
    7.5.7600.21xxxMicrosoft Internet Information Services 7.5RTMLDR
    7.5.7601.17xxxMicrosoft Internet Information Services 7.5SP1GDR
    7.5.7601.22xxxMicrosoft Internet Information Services 7.5SP1LDR
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformService Branch
Iiscore.dll7.5.7601.17959198,14425-Sep-1222:43x86GDR
Iiscore.dll7.5.7600.17130197,63225-Sep-1221:50x86GDR
Iiscore.dll7.5.7601.22118200,19225-Sep-1221:55x86LDR
Iiscore.dll7.5.7600.21329200,19225-Sep-1221:48x86LDR
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformService Branch
Iiscore.dll7.5.7601.17959300,54425-Sep-1222:40x64GDR
Iiscore.dll7.5.7600.17130313,85625-Sep-1222:32x64GDR
Iiscore.dll7.5.7601.22118315,90426-Sep-120:31x64LDR
Iiscore.dll7.5.7600.21329314,88025-Sep-1222:31x64LDR
For all supported IA-64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatformService Branch
Iiscore.dll7.5.7601.17959575,48825-Sep-1221:26IA-64GDR
Iiscore.dll7.5.7600.17130573,95225-Sep-1221:28IA-64GDR
Iiscore.dll7.5.7601.22118582,14425-Sep-1221:18IA-64LDR
Iiscore.dll7.5.7600.21329581,63225-Sep-1221:29IA-64LDR

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2
Additional files for all supported x86-based versions of Windows 7
Collapse this tableExpand this table
File nameUpdate.mum
File versionNot applicable
File size3,288
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameX86_0a27b249492399f5e7bb46319d7047df_31bf3856ad364e35_6.1.7600.17130_none_792d48e33dce1ae6.manifest
File versionNot applicable
File size705
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameX86_3893fa03872394e3b61573da514c8ff4_31bf3856ad364e35_6.1.7600.21329_none_cf7d1abbb3066208.manifest
File versionNot applicable
File size705
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameX86_7b4c85140b6d984a3858dbf4b1ebc008_31bf3856ad364e35_6.1.7601.17959_none_be1aa75b27ac40c0.manifest
File versionNot applicable
File size705
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameX86_9ccad84397aceb09ed8536b76243a794_31bf3856ad364e35_6.1.7601.22118_none_2ac84db702696a05.manifest
File versionNot applicable
File size705
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameX86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb151e08a746779.manifest
File versionNot applicable
File size10,228
Date (UTC)25-Sep-2012
Time (UTC)23:34
PlatformNot applicable
File nameX86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d04ec317a381cc88.manifest
File versionNot applicable
File size10,228
Date (UTC)25-Sep-2012
Time (UTC)23:11
PlatformNot applicable
File nameX86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18b3b6c87a2b93b.manifest
File versionNot applicable
File size10,228
Date (UTC)25-Sep-2012
Time (UTC)23:30
PlatformNot applicable
File nameX86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d23eefbfa0a1032c.manifest
File versionNot applicable
File size10,228
Date (UTC)25-Sep-2012
Time (UTC)23:09
PlatformNot applicable
Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
Collapse this tableExpand this table
File nameAmd64_2fa88f5a563ec54e59cdf37522895d4f_31bf3856ad364e35_6.1.7600.21329_none_d244b5cff964c649.manifest
File versionNot applicable
File size1,060
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameAmd64_9a2782acf05ed2b9b1578d0998aac46d_31bf3856ad364e35_6.1.7601.17959_none_b1a82f0e01a68d35.manifest
File versionNot applicable
File size1,060
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameAmd64_d1e907197a0fd9a7081264bd2a6e0e0c_31bf3856ad364e35_6.1.7601.22118_none_6108fdc84f6b4da2.manifest
File versionNot applicable
File size1,060
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameAmd64_ea97f989629c90a8235a1db0090ddbdf_31bf3856ad364e35_6.1.7600.17130_none_6693dc088de88c5e.manifest
File versionNot applicable
File size1,060
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameAmd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_2bcfed6442d1d8af.manifest
File versionNot applicable
File size10,236
Date (UTC)25-Sep-2012
Time (UTC)23:27
PlatformNot applicable
File nameAmd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_2c6d5e9b5bdf3dbe.manifest
File versionNot applicable
File size10,236
Date (UTC)25-Sep-2012
Time (UTC)23:18
PlatformNot applicable
File nameAmd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_2da9d6f040002a71.manifest
File versionNot applicable
File size10,236
Date (UTC)26-Sep-2012
Time (UTC)00:14
PlatformNot applicable
File nameAmd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_2e5d8b4358fe7462.manifest
File versionNot applicable
File size10,236
Date (UTC)26-Sep-2012
Time (UTC)01:04
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size3,730
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:50
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:49
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)23:19
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:49
PlatformNot applicable
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameIa64_12cb6d1aad6d92cc54ec444f576fc11b_31bf3856ad364e35_6.1.7600.17130_none_03dc66a9eee2ffc3.manifest
File versionNot applicable
File size1,058
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameIa64_6c1183fa3cc5dd6a1ce43c13fe51f242_31bf3856ad364e35_6.1.7601.22118_none_7885d8ee91fa8448.manifest
File versionNot applicable
File size1,058
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameIa64_746c43d065a408410e7159cb1a66b3c6_31bf3856ad364e35_6.1.7600.21329_none_f181afe1d2d95436.manifest
File versionNot applicable
File size1,058
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameIa64_cf84600e147b47d345af3ff52b2697d6_31bf3856ad364e35_6.1.7601.17959_none_83db5979f5c2d171.manifest
File versionNot applicable
File size1,058
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameIa64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb2f5d68a727075.manifest
File versionNot applicable
File size10,232
Date (UTC)25-Sep-2012
Time (UTC)23:15
PlatformNot applicable
File nameIa64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d050670da37fd584.manifest
File versionNot applicable
File size10,232
Date (UTC)25-Sep-2012
Time (UTC)23:16
PlatformNot applicable
File nameIa64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18cdf6287a0c237.manifest
File versionNot applicable
File size10,232
Date (UTC)26-Sep-2012
Time (UTC)00:14
PlatformNot applicable
File nameIa64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d24093b5a09f0c28.manifest
File versionNot applicable
File size10,232
Date (UTC)25-Sep-2012
Time (UTC)23:26
PlatformNot applicable
File nameUpdate.mum
File versionNot applicable
File size2,767
Date (UTC)26-Sep-2012
Time (UTC)19:07
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:50
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:49
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)23:19
PlatformNot applicable
File nameWow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest
File versionNot applicable
File size7,906
Date (UTC)25-Sep-2012
Time (UTC)22:49
PlatformNot applicable

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 2646886 - Last Review: November 26, 2012 - Revision: 7.0
Applies to
  • Microsoft Internet Information Services 7.5
Keywords: 
kbqfe kbhotfixserver kbfix kbexpertiseadvanced kbsurveynew atdownload KB2646886

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com