The Microsoft Active Server Pages (ASP) engine does not properly handle special cookie values when they are retrieved. Because of this, an unhandled error is returned to the client. This behavior can be used maliciously to gather sensitive information from web applications. All Microsoft Internet Information Server (IIS) web applications using Active Server Pages (ASP) are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33262/msaspCookie.txt
Source: https://packetstormsecurity.com/files/33262/msaspCookie.txt.html