Microsoft widens distribution of ASP.NET security patch

Stephen Withers
Friday, 01 October 2010 08:20

Business IT - Security

Microsoft has now widened the distribution of its latest security patch for Windows. It is now being pushed out through Windows Update and other channels.

Earlier this week, Microsoft released an out-of-cycle security update to fix a vulnerability in ASP.NET. All versions of the .NET Framework are affected by the issue.

The update was initially available only via the Microsoft Download Center. Although the patch itself had been fully tested, the company needed more time to test its deployment via Windows Update and Windows Server Update Services.

That testing has been completed, and Security Update MS10-070 was released overnight to the rest of Microsoft's usual distribution channels, including Windows Update and Windows Server Update Services.

All currently supported versions of Windows are affected by the issue, but desktop systems are only vulnerable if they a running a web server. The vulnerability is rated important as it can lead to information disclosure, and according to Microsoft officials it is being actively exploited.