3 ms·

So, IIS doesn't use http.sys?

• nbevans 12y ago
  It does. But this vulnerability is specifically with HTTP.SYS. HTTP.SYS is kind of like a SSL terminator and request router built into the OS.