Skip to content

CVE-2005-2224 aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.

MediumCVSS 5.0 EPSS 17.8%
Published
Updated
Exploit status
No public exploit known

Description

aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.

Affected products

ProductAffected versionsFixed in
Microsoft asp.net All versions No fix listed

References

  • 16005 not-applicable third-party-advisory vendor-advisory
  • 14217 third-party-advisory vdb-entry
  • www.spidynamics.com broken-link exploit vendor-advisory