directaccess.richardhicks.com
Critical Update MS15-034 and DirectAccess
The April 2015 monthly security update release from Microsoft includes a fix for a serious vulnerability in HTTP.sys. On an unpatched server, an attacker who sends a specially crafted HTTP request …