IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page.
NVD-CWE-Other