CVE-2006-0026

CVE-2006-0026 describes a buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 that is triggered by parsing crafted Active Server Pages (ASP). The underlying flaw in the ASP processing code can allow an attacker who can publish ASP pages to execute arbitrary code on ...

Microsoft Internet Information Services vulnerable to remote code execution via specially crafted ASP file

Overview Microsoft Internet Information Services IIS contains a buffer overflow vulnerability. This may allow a remote, authenticated attacker to execute arbitrary code on a vulnerable system. Description IIS IIS is a web server that comes with Microsoft Windows. ASP ASP Active Server Pages is a...