The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asp.net | Microsoft | 1.0 (including) | 1.0 (including) |
| Asp.net | Microsoft | 1.1 (including) | 1.1 (including) |