Microsoft has issued patches for Frontpage Server Extensions. These fix two vulnerabilities, which can allow malicious people to execute arbitrary code or cause a Denial of Service.

A boundary error in "fp30reg.dll" when handling chunked encoded posts can be exploited to cause a buffer overflow, which may allow execution of arbitrary code with SYSTEM privileges.

It is possible to cause certain SmartHTML (WebBots) to consume all available CPU resources for a short period of time through malicious HTTP requests.

The vulnerabilities affect Microsoft FrontPage Server Extensions 2000 and 2002 (except Windows 2000 systems with Service Pack 4 installed).

Solution
Patches are available:
Further details available in Customer Area

Provided and/or discovered by
Brett Moore of Security-Assessment.com

Changelog
Further details available in Customer Area

Original Advisory
Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360)
http://www.microsoft.com/technet/security/bulletin/MS03-051.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area