Intrusion PreventionMS.NET.Framework.NULL.Byte.Termination.Information.Disclosure
Description
This indicates a possible attempt to exploit an information disclosure vulnerability in ASP.NET, in Microsoft's .NET Framework.
This flaw is caused by an input validation error in ASP.NET when processing user supplied URLs.
Affected Products
Microsoft .NET Framework 1.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0
Impact
System compromise.
Recommended Actions
Apply patches :
http://www.microsoft.com/technet/security/Bulletin/MS07-040.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14795 |
| Created | Jul 18, 2007 |
| Updated | Nov 03, 2021 |
| Risk |
|
| CVE ID | CVE-2007-0042 |
| Exploit Prediction Score | 94.07% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | ASP_app |