Original link: Microsoft releases emergency patches for critical ASP.NET flaw / BleepingComputer.
Anyone using ASP.NET 10 should update to 10.0.7+.