Microsoft late Monday confirmed that its Internet Information Services (IIS) Web-server software contains a vulnerability that could let attackers steal data, but downplayed the threat.

"An attacker could exploit the vulnerability by creating a specially crafted HTTP request to a Web site that r...

More...