CVE-2005-2224: Microsoft ASP.NET

Medium severity, CVSS 5.0. EPSS: 17.8% chance of exploitation in the next 30 days.

aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.

Affected products

• Microsoft ASP.NET: affected versions not specified

Published 2005-07-12. Last modified 2026-06-16.