Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft ASP.NET COM Components W3WP远程拒绝服务漏洞
Vulnerability Description
Microsoft w3wp (aka w3wp.exe)未作妥善处理，这是由于当引用在ASP.NET中的COM组件时，未使用AspCompat指令的缘故，从而远程攻击者通过以下途径制造一个拒绝服务(资源占用或崩溃)： 对引用COM组件或位于ASP.NET应用程序路径下受限制的每一个文件重复发送请求。
CVSS Information
N/A
Vulnerability Type
N/A