We will post more information as our investigations
continue, and we will post security advisory updates if the situation
changes. You can learn more about this vulnerability from:
Microsoft Security Advisory 2416728
Understanding the ASP.NET Vulnerability
My Initial Blog Post
SharePoint Team Blog Post
Microsoft Security Response Center Blog Post
Microsoft Security Response Center Update Post
Please post specific questions about the vulnerability in this forum on the www.asp.net
web-site.
Important Update: You can now download the official security
patch update here. Please install it ASAP on your servers – it is
the only way to protect against the vulnerability.
Thanks,
Scott