Description
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
Remediation
References
Related Vulnerabilities
WordPress Plugin Post Content XMLRPC SQL Injection (1.0)
WordPress Plugin Wordfence Security-Firewall & Malware Scan Multiple Vulnerabilities (7.1.12)
WordPress Plugin jQuery Mega Menu Widget 'skin' Parameter Local File Include (1.0)
PHP Improper Input Validation Vulnerability (CVE-2014-9653)
MediaWiki Improper Authentication Vulnerability (CVE-2018-0505)