A vulnerability has been reported in Microsoft Visual C++, which potentially can be exploited by malicious people to cause a DoS (Denial-of-Service) on certain applications.

ISAPI (Internet Server Application Programming Interface) extensions built with the MFC (Microsoft Foundation Classes) static library may be vulnerable to DoS attacks.

The problem is that the MFC ISAPI code may produce invalid arguments under heavy load when processing data from POST requests. This may cause access violations.

The following products are affected:
* Microsoft Visual Studio 6.0
* Microsoft Visual C++ 6.0

Solution
The vulnerability has been fixed in Visual Studio 6.0 Service Pack 6, which will be available at:
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers