CVE-2009-1536

ASP.NET in Microsoft .NET Framework 2.0 SP1 , 2.0 SP2 , and 3.5 Gold (including 3.5 SP1 ) is vulnerable to a denial of service (DoS) when ASP 2.0 is used in integrated mode on IIS 7.0 . The root cause is a failure to properly manage request scheduling , allowing remote attackers to send a series ...