Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:11886
HistoryMar 22, 2006 - 12:00 a.m.

w3wp remote DoS due to improper reference of STA COM components in ASP.NET

2006-03-2200:00:00
vulners.com
11

Often developers forget to use the “AspCompat” directive which is required while referencing COM components in ASP.NET. Missing AspCompat directive causes general instability and poor performance of the web application, just a simple increase of load on a web server may cause it to crash. After working for more than one month with Microsoft (MSRC) on this issue, it is finally concluded that the w3wp crash can occur un-expectedly and is due to improper reference of COM or COM+ in the asp.net applications. Refer the PoC (Proof of Concept) for more details.