I've written lately about how Microsoft's /Gs compiler stack protection failed us with the .ANI fiasco. It seems that it failed us once again with the latest issue, the stack overflow in the DNS RPC administration interface.

I would think all network interface code is a candidate for special scrutiny, and I'm really surprised that a stack overflow is still in the RPC at this late date. Imagine how many people looked at it and didn't see it.

Perhaps they need to recompile again with the new aggressive stack check mode.