Out-of-band security update from Microsoft (UPDATED)
First published: 2010-09-28
Updated: 2010-10-01
Microsoft has released an out-of-band security update for an important vulnerability in ASP.NET. Exploits that utilize this vulnerability have been reported in-the-wild.
Important is Microsoft's second highest vulnerability assessment.
More information is available in Microsoft's Security Bulletin MS10-070.
Note that this security update will initially only be available as a download from Microsoft Download Center. According to Microsoft the security update will be available as an ordinary Windows Update within in a few days.
Users who are runnings systems that are vulnerable are recommended to deploy the update from Microsoft Download Center as soon as possible in order to be protected from exploits.
Update 1 October 2010
The security update update is now available also as a Windows Update as announced above.
