Reports of a zero-day vulnerability affecting Microsoft Internet Information Services surfaced on the Web Dec. 24. Microsoft says it is investigating the matter, and has found so far that only certain configurations of IIS are vulnerable to attack.
– Microsoft is investigating reports of a new vulnerability
affecting Microsoft Internet Information Services that could be used to execute
malicious code on vulnerable Web servers.
Details of the vulnerability came out Dec. 25 when security
researcher Soroush Dalili posted
information about the …