Microsoft Internet Information Services (IIS) 6.0 is vulnerable to a zero-day Buffer Overflow vulnerability (CVE-2017-7269) due to an improper validation of an ‘IF’ header in a PROPFIND request.
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
IIS 6.0 Vulnerability Leads to Code Execution