CVE-2006-0026: Microsoft Internet Information Server

Medium severity, CVSS 6.5. EPSS: 89.3% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arbitrary code via crafted Active Server Pages (ASP).

Affected products

• Microsoft Internet Information Server: version 6.0 only
• Microsoft Internet Information Services: version 5.0 only

Published 2006-07-11. Last modified 2026-06-16.