Windows Application Event Log Shows Error Message: Faulting application inetinfo.exe, version 6.0.3790.3959, faulting module SMTP262.DLL

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

The Windows Application Event log shows the following error message:



Type: Error

Event: 1000

Source: Application Error

Description:

Faulting application inetinfo.exe, version 6.0.3790.3959, faulting module SMTP262.DLL, version 6.0.8.262, fault address 0x000136ea.




Symptoms
SMTP service restarts after the error is recorded in the Windows Application Event log.

• The following error may be reported in the Windows Application Event log:

Faulting application w3wp.exe, version 6.0.3790.3959, faulting module davex.dll, version 6.5.7651.61, fault address
0x000689b9

 

Cause

The SMSMSE event sink is receiving NULL properties for an email message. Mail Security for Exchange is attempting to use NULL properties causing a fault in the application.

Resolution

This problem is fixed in Symantec Mail Security 6.0.10 for Microsoft Exchange. To learn how to obtain the latest version, read Where to download the latest version of Symantec Mail Security for Microsoft Exchange.

Workaround:

There are external factors that can cause the operating system to generate email messages without property information. Addressing these external factors can reduce or eliminate this situation.
 

• Use the Exchange Best Practices Analysis report and fix items related to old network card drivers, name resolution (DNS) problems, misconfiguraiton of SMTP connectors.

Visit the following Microsoft site for more information on the Exchange Best Practices Analyzer: http://www.microsoft.com/downloads/details.aspx?familyid=dbab201f-4bee-4943-ac22-e2ddbd258df3&displaylang=en

• Issues relating to networking duplex settings may cause the operating system to generate this situation as well.
   
• Upgrading to Symantec Mail Security Version 6.0.10 or later should correct this issue. Please upgrade to the latest version

Technical Information
The SMSMSE event sink component used for SMTP scanning, receives a NULL value for "IMailMsgProperties" argument (number 3 in the following declaration).
 

HRESULT ISmtpInCommandSink::OnSmtpInCommand(
[in] IUnknown *pServer,
[in] IUnknown *pSession,
[in] IMailMsgProperties *pMsg,
[in] ISmtpInCommandContext *pContext);

IMailMsgProperties *pMsg is a reference to the MailMsg object housing the current message content and properties. SMSMSE crashes when it tries to call SMTP using pMsg (which could be NULL in this case).