Update on the System.Web.Mail.SmtpMail problem

On July 23th, I blogged about a problem with NULL characters and the .NET version 1.1 System.Web.Mail.SmtpMail class and its Send method. I got an e-mail from a reader in PA, USA giving additional details, and with his permission I'm stating the information I got here.

It turns out that the problem occurs after installing the security patch 928366, detailed in the security bulletin MS07-040. Further, there's a whole web page about the problem this fix addresses. On this page, this problem is called the ".NET Null Byte Injection Vulnerabilities".

Thanks Patrick for the update!