February 2005

ID: 00158
Ref: 141/2005
Date: 23 February 2005:13:22:30
Version: 1

---

Title: Patch Release - Microsoft Security Announcement 887742 - HTTP.sys update XP Service Pack 2 or Server 2003(Microsoft).
Abstract: A computer that is running Microsoft Windows XP Service Pack 2 (SP2), Microsoft Windows XP Tablet PC Edition 2005, or Microsoft Windows Server 2003 unexpectedly stops. Additionally, the following Stop error message appears on a blue screen.
Vendors affected: Microsoft
Operating systems affected: Microsoft
Applications affected: Microsoft

---

Patch Release: URL: http://support.microsoft.com/kb/887742

SYMPTOMS

A computer that is running Microsoft Windows XP Service Pack 2 (SP2), Microsoft
Windows XP Tablet PC Edition 2005, or Microsoft Windows Server 2003 unexpectedly
stops. Additionally, the following Stop error message appears on a blue screen:

Stop 0x05 (INVALID_PROCESS_ATTACH_ATTEMPT)

Note The Windows XP SP2 features and components are included in Windows XP Tablet
PC Edition 2005.

CAUSE

This problem occurs because a coding error in the Http.sys file causes stack
corruption. This problem occurs if the following conditions are true:

. TDI filter drivers are installed on your computer. TDI filter drivers are
typically installed by antivirus or firewall programs.
. The installed TDI filter drivers return STATUS_PENDING to the TDI_SET_EVENT_HANDLER
I/O request, so that the call is processed as an asyncronous APC.

A coding error in the Http.sys file may cause stack corruption when the TDI filter
driver finishes processing the TDI_SET_EVENT_HANDLER I/O request asynchronously on
a different thread. The stack for the original thread is overwritten when the I/O
request is processed. This causes the Stop error message.

Note This problem does not occur with the original released version of Windows XP or
with Windows XP Service Pack 1 (SP1).

RESOLUTION

Windows XP

To resolve this problem in Windows XP SP2, download and install the Update for
Windows XP (KB887742).

The following file is available for download from the Microsoft Download Center:

Download the Update for Windows XP (KB887742) package now.
Release Date: November 2004

For additional information about how to download Microsoft Support files, click the
following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection
software that was available on the date that the file was posted. The file is stored on
security-enhanced servers that help to prevent any unauthorized changes to the file.

Windows Server 2003

There is no hotfix or update currently available to resolve this problem in Windows Server 2003.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed
in the "Applies to" section.

Windows XP
This problem was resolved in Update for Windows XP (KB887742).

APPLIES TO
. Microsoft Windows XP Home Edition Service Pack 2 (SP2)
. Microsoft Windows XP Professional Service Pack 2 (SP2)
. Microsoft Windows Server 2003, Web Edition
. Microsoft Windows Server 2003, Standard Edition
. Microsoft Windows Server 2003, Enterprise Edition
. Microsoft Windows Server 2003, Datacenter Edition
. Microsoft Windows XP Media Center Edition Service Pack 2 (SP2)
. Microsoft Windows XP Tablet PC Edition 2005