Microsoft has issued a security advisory for a recently disclosed vulnerability in the ASP.NET that could leave millions of Web pages vulnerable to attack. The vulnerability was first disclosed by researchers at the annual ekoparty hacking conference in Buenos Aires, Argentina on Friday. Microsoft said the company is not aware of any attacks leveraging the hole. The company provided steps to safeguard vulnerable ASP.Net applications from attacks. Microsoft promised to release more information as it became available and as it worked towards a permanent fix.
Source: https://threatpost.com/microsoft-issues-advisory-aspnet-hole-092010/74488/