CVE-2006-1364: microsoft asp.net Uncontrolled Resource Consumption

EPSS trend

Probability

58.74%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 58.74% on 20-09-2026

20-09-202620-10-2026

EPSS score

58.74%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securiteam.com)
Maturity: unknown
exploit-databasedoswindowsVerified
ASP.NET w3wp - COM Components Remote Crash
Maturity: poc

References

9 links

www.securityfocus.com/archive/1/428622/100/0/threadedMailing ListX Refsource BUGTRAQ
hackingspirits.com/vuln-rnd/w3wp-remote-dos.zipX Refsource MISCBroken LinkThird Party Advisory
securitytracker.com/id?1015825VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/bid/17188VDB EntryX Refsource BIDExploitThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/25392VDB EntryX Refsource XFThird Party Advisory
www.exploit-db.com/exploits/1601ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.securiteam.com/windowsntfocus/5KP0O0KI0Y.htmlX Refsource MISCExploitThird Party Advisory
lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.htmlMailing ListX Refsource FULLDISCThird Party Advisory
lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.htmlMailing ListX Refsource FULLDISCThird Party Advisory

Related vulnerabilities

CVE-2018-8171microsoftasp.net+510.77%8y ago11-07-2018 00:00A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.CVE-2003-0768microsoftasp.net13.00%23y ago12-09-2003 04:00Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.CVE-2005-2224microsoftasp.net17.83%21y ago12-07-2005 04:00aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.CVE-2005-1664microsoftasp.net18.85%21y ago18-05-2005 04:00The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application's state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.CVE-2005-1665microsoftasp.net40.33%21y ago18-05-2005 04:00The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.CVE-2005-0452microsoftasp.net23.37%21y ago16-02-2005 05:00Multiple cross-site scripting (XSS) vulnerabilities in Microsoft ASP.NET (.Net) 1.0 and 1.1 to SP1 allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

All vulnerabilities inasp.net

CVE-2006-1364: microsoft asp.net Uncontrolled Resource Consumption

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References