The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding whose associated memory is not released related to a \DN AttributeValue \ aka \Active Directory Invalid Free Vulnerability.\ NOTE: this issue is probably a memory leak.