List of Message Queuing Fixes in Windows 2000 Service Pack 3 (324946)


The information in this article applies to:

  • Microsoft Windows 2000 Server SP3
  • Microsoft Windows 2000 Advanced Server SP3
  • Microsoft Windows 2000 Professional SP3
This article was previously published under Q324946

SUMMARY

Windows 2000 Service Pack 3 (SP3) fixes the following Message Queuing (also known as MSMQ) bugs:
  • Message Queuing ActiveX Control is Registered as Safe for Scripting
    A malicious Web site can use this vulnerability to perform Message Queuing operations on behalf of a browsing user, without prompting. This update removes the "safe for scripting" category from all Message Queuing Component Object Model (COM) objects.
  • Script Causes Message Queuing Service to Stop Responding
    A remote procedure call (RPC) attack that calls a NULL pointer in the RPC interface server entries may cause the Message Queuing service (Mqsvc.exe) to stop responding (crash).

MORE INFORMATION

For additional information about what other MSMQ problems are fixed by Windows 2000 SP3, click the article number below to view the article in the Microsoft Knowledge Base:

320853 List of Bugs Fixed in Windows 2000 Service Pack 3

For additional information about how to obtain SP3 for Windows 2000, click the article number below to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

Modification Type:MajorLast Reviewed:11/19/2003
Keywords:kbinfo kbpending kbWin2000sp3fix KB324946
©2003 Microsoft Corporation. All rights reserved.