Microsoft Releases Advance Notification for Out-of-Band Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that it will be releasing an out-of-band security bulletin to address a vulnerability affecting Windows. The Microsoft SharePoint Team blog indicates that this bulletin will address the recently reported vulnerability in ASP.NET. Exploitation of this vulnerability may allow an attacker to obtain sensitive information or tamper with data. Release of this bulletin is scheduled for September 28, 2010.



US-CERT encourages users and administrators to review the Microsoft Security Bulletin Advance Notification, the SharePoint Team blog entry, and Microsoft Security Advisory 2416728 for additional information regarding this vulnerability.



US-CERT will provide additional information as it becomes available.