(MS14-076) Vulnerability in Internet Information Services (IIS) Could Allow Security Feature Bypass (2982998)
Publish Date: 14 de ноября de 2014
Severity: : High
CVE Kennungen: : CVE-2014-4078
Advisory Date: 14 de ноября de 2014
DESCRIPTION
This update resolves a security bypass feature that exists in Microsoft Information Services (IIS) versions 8.0 and 8.5. The update fixes the vulnerability specifically in how inbound requests are processed against a list of IPs and domains that are to be allowed or denied.
SOLUTION
AFFECTED SOFTWARE AND VERSION:
- Windows 8 for 32-bit Systems
- Windows 8 for x64-based Systems
- Windows 8.1 for 32-bit Systems
- Windows 8.1 for x64-based Systems
- Windows Server 2012
- Windows Server 2012 R2