CVE-2011-3414

The CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, whic...

CVE-2011-3414

The ASP.NET subsystem in Microsoft .NET Framework versions 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 is vulnerable to a denial of service (DoS) condition. The root cause is the CaseInsensitiveHashProvider.getHashCode function in the HashTable implementation, which fails to restrict the ability to...