Searching in AVIcode SE Viewer fails with "The URL encoded form data are not valid" error


When using AVIcode SE Viewer to search for specific criteria, the following error message may be generated:

: Operation is not valid due to the current state of the object. (translation: the operation is not valid Because of the state of the object)
Source: System.Web
Target Site: Void ThrowIfMaxHttpCollectionKeysExceeded ()

Stack Trace: at System.Web.HttpValueCollection.ThrowIfMaxHttpCollectionKeysExceeded ()
to System.Web.HttpValueCollection.FillFromEncodedBytes (Byte [] bytes, Encoding encoding)
System.Web.HttpRequest.FillInFormCollection to ()

Message: The URL encoded form data are not valid.
Source: System.Web
Target Site: Void FillInFormCollection ()

Stack Trace: at System.Web.HttpRequest.FillInFormCollection ()
System.Web.HttpRequest.get_Form to ()
System.Web.HttpRequest.get_HasForm to ()
to System.Web.UI.Page.GetCollectionBasedOnMethod (Boolean dontReturnNull)
System.Web.UI.Page.DeterminePostBackMode to ()
at System.Web.UI.Page.ProcessRequestMain (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Message: Exception of type 'System.Web.HttpUnhandledException' was thrown.
Source: System.Web
Target Site: Boolean HandleError (System.Exception)

Stack Trace: at System.Web.UI.Page.HandleError (Exception e)
at System.Web.UI.Page.ProcessRequestMain (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest (Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest ()
at System.Web.UI.Page.ProcessRequest (HttpContext context)
to ASP.pages_search_allevents_aspx.ProcessRequest (HttpContext context)
at System.Web.HttpApplication.ExecuteStep (IExecutionStep step, Boolean & completedSynchronously)


This issue was introduced by Microsoft Security Bulleting MS11-100 ( or  This hotfix affects any applications that rely on .Net Framework 4 and handle large amounts of forms data. The hotfix adds the following key to the web.config file which has a default value of 1000:

<configuration xmlns=”″>
<add key=”aspnet:MaxHttpCollectionKeys” value=”1000” />


To resolve this issue, modify the web.config file located in <drive>:\Program Files (x86)\AVIcode\Intercept\SEViewer\Web and change the value of MaxHttpCollectionKeys to a higher value.  For example, change this:

        <add key="configPath" value="..\SEViewer.config" />
 <add key="aspnet:MaxHttpCollectionKeys" value="1000" />
        <!--add  key="WorkItemTrackingCacheRoot" value="C:\Program Files\Avicode\Intercept\SEViewer\Database\"/-->

to this:

<add key="configPath" value="..\SEViewer.config" />
<add key="aspnet:MaxHttpCollectionKeys" value="5000" />
<!--add key="WorkItemTrackingCacheRoot" value="C:\Program Files\Avicode\Intercept\SEViewer\Database\"/-->

More Information

Note that increasing the MaxHttpCollectionKeys value above the default setting of 1000 increases the susceptibility of your server to the Denial of Service vulnerability that is discussed in security bulletin MS11-100.  Please be sure you understand the issue as documented in Knowledge Base article 2661403 ( and the possible ramifications for your particular environment before making the modifications discussed above.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Article ID: 2667985 - Last Review: 02/02/2012 16:07:00 - Revision: 3.0

AVIcode, Inc.

  • KB2667985