F-Secure Vulnerability Information :
Microsoft Windows IIS IPP Service Integer Overflow Vulnerability

A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to an integer overflow error within the IPP (Internet Printing Protocol) ISAPI extension for IIS when processing specially crafted IPP responses. This can be exploited to execute arbitrary code by tricking an affected web server into connecting to a malicious IPP server via a specially crafted HTTP "POST" request.

Successful exploitation requires that IPP is enabled in IIS.