<A target="_blank" href="http://www.theregister.co.uk/2011/04/18/windows_heap_exploit_shield_pierced/">Back in December Microsoft claimed to have security in place to protect</A> against an FTP vulnerability in IIS. However, if you know what you're doing, there is still a problem that can be exploited.