FIX: Heap corruption occurs when a module calls the InsertEntityBody method in IIS 7.5

Symptoms

Consider the following scenario:

  • You create an HTTP module that calls the IHttpRequest::InsertEntityBody method to insert a new entity body into an existing HTTP request body.

  • You register the module on a computer that is running Internet Information Services (IIS) 7.5, and then you enable the module.

  • You restart the IIS service, and then a client request is made to a webpage that is hosted on the computer.

In this scenario, heap corruption occurs, and the module does not work.

Cause

The issue occurs because of an access violation that occurs when the InsertEntityBody method tries to read the buffer from a freed memory location in the IIS service.

Resolution

Hotfix information

The following files are available for download from the Microsoft Download Center:
Download Download the hotfix package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

You must have IIS 7.5 installed to apply this hotfix. This hotfix can be installed on a computer that is running one of the following operating systems:

  • Windows 7

  • Windows 7 Service Pack 1 (SP1)

  • Windows Server 2008 R2

  • Windows Server 2008 R2 Service Pack 1 (SP1)

Restart requirement

You must restart the computer if IIS is running when you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The English (United States) version of this hotfix uses a Microsoft Windows Installer package to install the hotfix. The dates and the times for these files are listed in Coordinated Universal Time (UTC) in the following table. When you view the file information, the date is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows 7 and Windows Server 2008 R2 file information notes


Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    7.5.7600.17xxx

    Microsoft Internet Information Services 7.5

    RTM

    GDR

    7.5.7600.21xxx

    Microsoft Internet Information Services 7.5

    RTM

    LDR

    7.5.7601.17xxx

    Microsoft Internet Information Services 7.5

    SP1

    GDR

    7.5.7601.22xxx

    Microsoft Internet Information Services 7.5

    SP1

    LDR

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name

File version

File size

Date

Time

Platform

Service Branch

Iiscore.dll

7.5.7601.17959

198,144

25-Sep-12

22:43

x86

GDR

Iiscore.dll

7.5.7600.17130

197,632

25-Sep-12

21:50

x86

GDR

Iiscore.dll

7.5.7601.22118

200,192

25-Sep-12

21:55

x86

LDR

Iiscore.dll

7.5.7600.21329

200,192

25-Sep-12

21:48

x86

LDR

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Service Branch

Iiscore.dll

7.5.7601.17959

300,544

25-Sep-12

22:40

x64

GDR

Iiscore.dll

7.5.7600.17130

313,856

25-Sep-12

22:32

x64

GDR

Iiscore.dll

7.5.7601.22118

315,904

26-Sep-12

0:31

x64

LDR

Iiscore.dll

7.5.7600.21329

314,880

25-Sep-12

22:31

x64

LDR

For all supported IA-64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Service Branch

Iiscore.dll

7.5.7601.17959

575,488

25-Sep-12

21:26

IA-64

GDR

Iiscore.dll

7.5.7600.17130

573,952

25-Sep-12

21:28

IA-64

GDR

Iiscore.dll

7.5.7601.22118

582,144

25-Sep-12

21:18

IA-64

LDR

Iiscore.dll

7.5.7600.21329

581,632

25-Sep-12

21:29

IA-64

LDR

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2
Additional files for all supported x86-based versions of Windows 7

File name

Update.mum

File version

Not applicable

File size

3,288

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

X86_0a27b249492399f5e7bb46319d7047df_31bf3856ad364e35_6.1.7600.17130_none_792d48e33dce1ae6.manifest

File version

Not applicable

File size

705

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

X86_3893fa03872394e3b61573da514c8ff4_31bf3856ad364e35_6.1.7600.21329_none_cf7d1abbb3066208.manifest

File version

Not applicable

File size

705

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

X86_7b4c85140b6d984a3858dbf4b1ebc008_31bf3856ad364e35_6.1.7601.17959_none_be1aa75b27ac40c0.manifest

File version

Not applicable

File size

705

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

X86_9ccad84397aceb09ed8536b76243a794_31bf3856ad364e35_6.1.7601.22118_none_2ac84db702696a05.manifest

File version

Not applicable

File size

705

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb151e08a746779.manifest

File version

Not applicable

File size

10,228

Date (UTC)

25-Sep-2012

Time (UTC)

23:34

Platform

Not applicable

File name

X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d04ec317a381cc88.manifest

File version

Not applicable

File size

10,228

Date (UTC)

25-Sep-2012

Time (UTC)

23:11

Platform

Not applicable

File name

X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18b3b6c87a2b93b.manifest

File version

Not applicable

File size

10,228

Date (UTC)

25-Sep-2012

Time (UTC)

23:30

Platform

Not applicable

File name

X86_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d23eefbfa0a1032c.manifest

File version

Not applicable

File size

10,228

Date (UTC)

25-Sep-2012

Time (UTC)

23:09

Platform

Not applicable

Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name

Amd64_2fa88f5a563ec54e59cdf37522895d4f_31bf3856ad364e35_6.1.7600.21329_none_d244b5cff964c649.manifest

File version

Not applicable

File size

1,060

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Amd64_9a2782acf05ed2b9b1578d0998aac46d_31bf3856ad364e35_6.1.7601.17959_none_b1a82f0e01a68d35.manifest

File version

Not applicable

File size

1,060

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Amd64_d1e907197a0fd9a7081264bd2a6e0e0c_31bf3856ad364e35_6.1.7601.22118_none_6108fdc84f6b4da2.manifest

File version

Not applicable

File size

1,060

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Amd64_ea97f989629c90a8235a1db0090ddbdf_31bf3856ad364e35_6.1.7600.17130_none_6693dc088de88c5e.manifest

File version

Not applicable

File size

1,060

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_2bcfed6442d1d8af.manifest

File version

Not applicable

File size

10,236

Date (UTC)

25-Sep-2012

Time (UTC)

23:27

Platform

Not applicable

File name

Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_2c6d5e9b5bdf3dbe.manifest

File version

Not applicable

File size

10,236

Date (UTC)

25-Sep-2012

Time (UTC)

23:18

Platform

Not applicable

File name

Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_2da9d6f040002a71.manifest

File version

Not applicable

File size

10,236

Date (UTC)

26-Sep-2012

Time (UTC)

00:14

Platform

Not applicable

File name

Amd64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_2e5d8b4358fe7462.manifest

File version

Not applicable

File size

10,236

Date (UTC)

26-Sep-2012

Time (UTC)

01:04

Platform

Not applicable

File name

Update.mum

File version

Not applicable

File size

3,730

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:50

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:49

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

23:19

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:49

Platform

Not applicable

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File name

Ia64_12cb6d1aad6d92cc54ec444f576fc11b_31bf3856ad364e35_6.1.7600.17130_none_03dc66a9eee2ffc3.manifest

File version

Not applicable

File size

1,058

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Ia64_6c1183fa3cc5dd6a1ce43c13fe51f242_31bf3856ad364e35_6.1.7601.22118_none_7885d8ee91fa8448.manifest

File version

Not applicable

File size

1,058

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Ia64_746c43d065a408410e7159cb1a66b3c6_31bf3856ad364e35_6.1.7600.21329_none_f181afe1d2d95436.manifest

File version

Not applicable

File size

1,058

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Ia64_cf84600e147b47d345af3ff52b2697d6_31bf3856ad364e35_6.1.7601.17959_none_83db5979f5c2d171.manifest

File version

Not applicable

File size

1,058

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_cfb2f5d68a727075.manifest

File version

Not applicable

File size

10,232

Date (UTC)

25-Sep-2012

Time (UTC)

23:15

Platform

Not applicable

File name

Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_d050670da37fd584.manifest

File version

Not applicable

File size

10,232

Date (UTC)

25-Sep-2012

Time (UTC)

23:16

Platform

Not applicable

File name

Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_d18cdf6287a0c237.manifest

File version

Not applicable

File size

10,232

Date (UTC)

26-Sep-2012

Time (UTC)

00:14

Platform

Not applicable

File name

Ia64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_d24093b5a09f0c28.manifest

File version

Not applicable

File size

10,232

Date (UTC)

25-Sep-2012

Time (UTC)

23:26

Platform

Not applicable

File name

Update.mum

File version

Not applicable

File size

2,767

Date (UTC)

26-Sep-2012

Time (UTC)

19:07

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.17130_none_362497b677329aaa.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:50

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7600.21329_none_36c208ed903fffb9.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:49

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.17959_none_37fe81427460ec6c.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

23:19

Platform

Not applicable

File name

Wow64_microsoft-windows-iis-corewebengine_31bf3856ad364e35_6.1.7601.22118_none_38b235958d5f365d.manifest

File version

Not applicable

File size

7,906

Date (UTC)

25-Sep-2012

Time (UTC)

22:49

Platform

Not applicable

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×