This important security update resolves one vulnerability. This vulnerability could allow remote code execution if an attacker sent specially crafted URL requests to a Web page hosted by Internet Information Services (IIS) 5.1 on Windows XP Professional Service Pack 2. IIS 5.1 is not part of a default install of Windows XP Professional Service Pack 2. An attacker who successfully exploited this vulnerability could take complete control of the affected system.

This is an important security update for all supported 32-bit editions of Windows XP Service Pack 2. This security update addresses the vulnerability by adding a check on memory requests within Internet Information Services.