Symptoms
Consider the following scenario:
- You create an HTTP module that calls the IHttpRequest::InsertEntityBody method to insert a new entity body into an existing HTTP request body.
- You register the module on a computer that is running Internet Information Services (IIS) 7.5, and then you enable the module.
- You restart the IIS service, and then a client request is made to a webpage that is hosted on the computer.
In this scenario, heap corruption occurs, and the module does not work.
Cause
The issue occurs because of an access violation that occurs when the InsertEntityBody method tries to read the buffer from a freed memory location in the IIS service.
Resolution
Hotfix information
The following files are available for download from the Microsoft Download Center:
Download the hotfix package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Prerequisites
You must have IIS 7.5 installed to apply this hotfix. This hotfix can be installed on a computer that is running one of the following operating systems:
- Windows 7
- Windows 7 Service Pack 1 (SP1)
- Windows Server 2008 R2
- Windows Server 2008 R2 Service Pack 1 (SP1)
Restart requirement
You must restart the computer if IIS is running when you apply this hotfix.
Hotfix replacement information
This hotfix does not replace a previously released hotfix.
File information
The English (United States) version of this hotfix uses a Microsoft Windows Installer package to install the hotfix. The dates and the times for these files are listed in Coordinated Universal Time (UTC) in the following table. When you view the file information, the date is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows 7 and Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch 7.5.7600.17xxx Microsoft Internet Information Services 7.5 RTM GDR 7.5.7600.21xxx Microsoft Internet Information Services 7.5 RTM LDR 7.5.7601.17xxx Microsoft Internet Information Services 7.5 SP1 GDR 7.5.7601.22xxx Microsoft Internet Information Services 7.5 SP1 LDR The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
| File name | File version | File size | Date | Time | Platform | Service Branch |
|---|---|---|---|---|---|---|
| Iiscore.dll | 7.5.7601.17959 | 198,144 | 25-Sep-12 | 22:43 | x86 | GDR |
| Iiscore.dll | 7.5.7600.17130 | 197,632 | 25-Sep-12 | 21:50 | x86 | GDR |
| Iiscore.dll | 7.5.7601.22118 | 200,192 | 25-Sep-12 | 21:55 | x86 | LDR |
| Iiscore.dll | 7.5.7600.21329 | 200,192 | 25-Sep-12 | 21:48 | x86 | LDR |
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
| File name | File version | File size | Date | Time | Platform | Service Branch |
|---|---|---|---|---|---|---|
| Iiscore.dll | 7.5.7601.17959 | 300,544 | 25-Sep-12 | 22:40 | x64 | GDR |
| Iiscore.dll | 7.5.7600.17130 | 313,856 | 25-Sep-12 | 22:32 | x64 | GDR |
| Iiscore.dll | 7.5.7601.22118 | 315,904 | 26-Sep-12 | 0:31 | x64 | LDR |
| Iiscore.dll | 7.5.7600.21329 | 314,880 | 25-Sep-12 | 22:31 | x64 | LDR |
For all supported IA-64-based versions of Windows Server 2008 R2
| File name | File version | File size | Date | Time | Platform | Service Branch |
|---|---|---|---|---|---|---|
| Iiscore.dll | 7.5.7601.17959 | 575,488 | 25-Sep-12 | 21:26 | IA-64 | GDR |
| Iiscore.dll | 7.5.7600.17130 | 573,952 | 25-Sep-12 | 21:28 | IA-64 | GDR |
| Iiscore.dll | 7.5.7601.22118 | 582,144 | 25-Sep-12 | 21:18 | IA-64 | LDR |
| Iiscore.dll | 7.5.7600.21329 | 581,632 | 25-Sep-12 | 21:29 | IA-64 | LDR |
Additional file information
Additional file information for Windows 7 and for Windows Server 2008 R2
Additional files for all supported x86-based versions of Windows 7
| File name | Update.mum |
|---|---|
| File version | Not applicable |
| File size | 3,288 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | X86_0a27b249492399f5e7bb46319d7047df_31bf3856ad364e35_6.1.7600.17130_none_792d48e33dce1ae6.manifest |
| File version | Not applicable |
| File size | 705 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | X86_3893fa03872394e3b61573da514c8ff4_31bf3856ad364e35_6.1.7600.21329_none_cf7d1abbb3066208.manifest |
| File version | Not applicable |
| File size | 705 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | X86_7b4c85140b6d984a3858dbf4b1ebc008_31bf3856ad364e35_6.1.7601.17959_none_be1aa75b27ac40c0.manifest |
| File version | Not applicable |
| File size | 705 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | X86_9ccad84397aceb09ed8536b76243a794_31bf3856ad364e35_6.1.7601.22118_none_2ac84db702696a05.manifest |
| File version | Not applicable |
| File size | 705 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb151e08a746779.manifest |
| File version | Not applicable |
| File size | 10,228 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:34 |
| Platform | Not applicable |
| File name | X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d04ec317a381cc88.manifest |
| File version | Not applicable |
| File size | 10,228 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:11 |
| Platform | Not applicable |
| File name | X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18b3b6c87a2b93b.manifest |
| File version | Not applicable |
| File size | 10,228 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:30 |
| Platform | Not applicable |
| File name | X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d23eefbfa0a1032c.manifest |
| File version | Not applicable |
| File size | 10,228 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:09 |
| Platform | Not applicable |
Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
| File name | Amd64_2fa88f5a563ec54e59cdf37522895d4f_31bf3856ad364e35_6.1.7600.21329_none_d244b5cff964c649.manifest |
|---|---|
| File version | Not applicable |
| File size | 1,060 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Amd64_9a2782acf05ed2b9b1578d0998aac46d_31bf3856ad364e35_6.1.7601.17959_none_b1a82f0e01a68d35.manifest |
| File version | Not applicable |
| File size | 1,060 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Amd64_d1e907197a0fd9a7081264bd2a6e0e0c_31bf3856ad364e35_6.1.7601.22118_none_6108fdc84f6b4da2.manifest |
| File version | Not applicable |
| File size | 1,060 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Amd64_ea97f989629c90a8235a1db0090ddbdf_31bf3856ad364e35_6.1.7600.17130_none_6693dc088de88c5e.manifest |
| File version | Not applicable |
| File size | 1,060 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_2bcfed6442d1d8af.manifest |
| File version | Not applicable |
| File size | 10,236 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:27 |
| Platform | Not applicable |
| File name | Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_2c6d5e9b5bdf3dbe.manifest |
| File version | Not applicable |
| File size | 10,236 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:18 |
| Platform | Not applicable |
| File name | Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_2da9d6f040002a71.manifest |
| File version | Not applicable |
| File size | 10,236 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 00:14 |
| Platform | Not applicable |
| File name | Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_2e5d8b4358fe7462.manifest |
| File version | Not applicable |
| File size | 10,236 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 01:04 |
| Platform | Not applicable |
| File name | Update.mum |
| File version | Not applicable |
| File size | 3,730 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:50 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:49 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:19 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:49 |
| Platform | Not applicable |
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
| File name | Ia64_12cb6d1aad6d92cc54ec444f576fc11b_31bf3856ad364e35_6.1.7600.17130_none_03dc66a9eee2ffc3.manifest |
|---|---|
| File version | Not applicable |
| File size | 1,058 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Ia64_6c1183fa3cc5dd6a1ce43c13fe51f242_31bf3856ad364e35_6.1.7601.22118_none_7885d8ee91fa8448.manifest |
| File version | Not applicable |
| File size | 1,058 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Ia64_746c43d065a408410e7159cb1a66b3c6_31bf3856ad364e35_6.1.7600.21329_none_f181afe1d2d95436.manifest |
| File version | Not applicable |
| File size | 1,058 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Ia64_cf84600e147b47d345af3ff52b2697d6_31bf3856ad364e35_6.1.7601.17959_none_83db5979f5c2d171.manifest |
| File version | Not applicable |
| File size | 1,058 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb2f5d68a727075.manifest |
| File version | Not applicable |
| File size | 10,232 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:15 |
| Platform | Not applicable |
| File name | Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d050670da37fd584.manifest |
| File version | Not applicable |
| File size | 10,232 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:16 |
| Platform | Not applicable |
| File name | Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18cdf6287a0c237.manifest |
| File version | Not applicable |
| File size | 10,232 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 00:14 |
| Platform | Not applicable |
| File name | Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d24093b5a09f0c28.manifest |
| File version | Not applicable |
| File size | 10,232 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:26 |
| Platform | Not applicable |
| File name | Update.mum |
| File version | Not applicable |
| File size | 2,767 |
| Date (UTC) | 26-Sep-2012 |
| Time (UTC) | 19:07 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:50 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:49 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 23:19 |
| Platform | Not applicable |
| File name | Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest |
| File version | Not applicable |
| File size | 7,906 |
| Date (UTC) | 25-Sep-2012 |
| Time (UTC) | 22:49 |
| Platform | Not applicable |
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.