ASP.NET security update shipping tomorrow

Out-of-band security update will be published for ASP.NET tomorrow. Security update will solve publicly known DoS issue that exists in all versions of ASP.NET. Update will be delivered through Windows Update and Windows Server Update.

More details:

From security advisory document: “Sites that disallow application/x-www-form-urlencoded or multipart/form-data HTTP content types are not vulnerable”. It seems like most of servers are affected.


Leave a Reply

Your email address will not be published. Required fields are marked *