A vulnerability has been reported in Microsoft Internet Information Services (IIS), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an unspecified error within the processing of input to ASP web pages. This can be exploited to execute arbitrary code with the privileges of the Worker Process Identity (WPI) by passing specially crafted input to an ASP page.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
MS08-006 (KB942830):
http://www.microsoft.com/technet/security/Bulletin/MS08-006.mspx

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area