threatpost reports that Microsoft will release an emergency out-of-band patch for the ASP.NET padding oracle attack that was disclosed earlier this month

The company is taking the step of releasing an emergency fix for the bug because of the seriousness of the vulnerability--which potentially affects millions of Web applications--and the fact that there are attacks ongoing against it already. The patch will fix the flaw in all versions of the .NET framework.

  Microsoft to Release Emergency Patch For ASP.NET Bug