Microsoft KB Archive/324946

= List of Message Queuing Fixes in Windows 2000 Service Pack 3 =

Article ID: 324946

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 3
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 3

-



This article was previously published under Q324946



SUMMARY
Windows 2000 Service Pack 3 (SP3) fixes the following Message Queuing (also known as MSMQ) bugs:
 * Message Queuing ActiveX Control is Registered as Safe for Scripting

A malicious Web site can use this vulnerability to perform Message Queuing operations on behalf of a browsing user, without prompting. This update removes the &quot;safe for scripting&quot; category from all Message Queuing Component Object Model (COM) objects.
 * Script Causes Message Queuing Service to Stop Responding

A remote procedure call (RPC) attack that calls a NULL pointer in the RPC interface server entries may cause the Message Queuing service (Mqsvc.exe) to stop responding (crash).



MORE INFORMATION
For additional information about what other MSMQ problems are fixed by Windows 2000 SP3, click the article number below to view the article in the Microsoft Knowledge Base:

320853 List of Bugs Fixed in Windows 2000 Service Pack 3

For additional information about how to obtain SP3 for Windows 2000, click the article number below to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

Additional query words: kbMSMQ list kbWin2000sp3fixlist

Keywords: kbinfo kbwin2000sp3fix kbpending KB324946

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.