Microsoft to Release Emergency Fix for ASP.NET DoS Flaw

Microsoft to Release Emergency Fix for ASP.NET DoS Flaw (threatpost.com) by

ademar (17), (0.04) on Thursday, December 29, 2011, 2:00:22 PM

Microsoft on Thursday plans to release an emergency out-of-band update to address a vulnerability in ASP.NET that could allow an attacker to consume all of the resources on a vulnerable server with a single specially designed HTTP request. The vulnerability affects a wide range of Web platforms are vulnerable to this attack, and Microsoft officials said they're releasing the patch now because they're expecting exploit code to be released in the near future.