Microsoft has released an “Out-of-Band” Security Update which resolves a publicly disclosed vulnerability in ASP.NET that could potentially lead to information disclosure. Microsoft rates the severity of this update as Important. The Security Update is available for a number of Microsoft Windows Desktop and Server versions. This update should appear in Windows Update sometime this week, but is available directly from Microsoft’s website immediately.
For more information about the security update, please see http://www.microsoft.com/technet/security/bulletin/ms10-070.mspx
(Note that a Microsoft “Out-of-Band” security update is one that is released outside of Microsoft’s normally scheduled security updates on the second Tuesday of each month.)