Mitigating Remote Code Execution in "HTTP.sys" (CVE-2015-1635)

A critical Windows vulnerability in its HTTP stack ("HTTP.sys"), which was resolved in a recent Microsoft's Patch Tuesday release, could allow remote attackers to execute code on an IIS server with t...
Published Apr 15, 2015
Version 1.0
0 day
0-day
ASM Advanced WAF
cve-2015-1635
exploit
http.sys
iis vulnerability
ms15-034
security
zero day
Tarik_B_'s avatar
Tarik_B_
Icon for Nimbostratus rankNimbostratus
Apr 16, 2015
HI Maxim, As a beginner, can you explain me how to implement this solution in the ASM (BIGIP 10.2.4)