05.148.2003 - MS03-019: Flaw in ISAPI Extension for Windows Media Services Could Cause Denial of Service (817772)

There is a flaw in the way in which nsiislog.dll processes incoming requests. A vulnerability exists because an attacker could send specially formed communications to the server that could cause IIS to stop responding to Internet requests. Windows Media Services is not installed by default on Windows 2000, and must be downloaded to install on Windows NT 4.0. An attacker attempting to exploit this vulnerability would have to be aware which computers on the network had Windows Media Services installed on it and send a specific request to that server. The denial of service would only affect IIS, and other services on the server would remain unaffected. - Download Patch for Windows 2000 (Direct Link) - Download Patch for Windows NT 4.0 (Direct Link) - View Security Bulletin MS03-019 - View End User Security Bulletin - View Microsoft Knowledge Base Article - 817772 - Visit Microsoft Corporation