Windows Security Patch: Flaw in ISAPI Extension

Flaw in ISAPI Extension for Windows Media Services Could Cause Denial of Service

There is a flaw in the way in which nsiislog.dll processes incoming requests. A vulnerability exists because an attacker could send specially formed communications to the server that could cause IIS to stop responding to Internet requests.

Windows Media Services is not installed by default on Windows 2000, and must be downloaded to install on Windows NT 4.0. An attacker attempting to exploit this vulnerability would have to be aware which computers on the network had Windows Media Services installed on it and send a specific request to that server. The denial of service would only affect IIS, and other services on the server would remain unaffected.

Download: Windows NT 4.0 Security Patch: Flaw in ISAPI Extension for Windows Media Services