Very Long URL Passed to ASP May Cause Access Violation (187503)

The information in this article applies to:

Microsoft Internet Information Server 3.0

This article was previously published under Q187503

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When a very long Uniform Resource Locator (URL), usually with hundreds of forward slash (/) characters, is passed to an Active Server Pages (ASP) page on the Web server, an access violation occurs.

WORKAROUND

To resolve this problem, obtain the following fix.

This fix should have the following time stamp:

      04/10/98  07:49p               382,576 asp.dll (Intel)
      04/10/98  08:04p               557,328 asp.dll (Alpha)

STATUS

Microsoft has confirmed this to be a problem in Internet Information Server version 3.0.

A supported fix is now available, but has not been fully regression tested and should be applied only to systems experiencing this specific problem. Contact Microsoft Technical Support for more information.

Modification Type:	Minor	Last Reviewed:	6/23/2005
Keywords:	kbbug kbfix KB187503