http://ilantz.com/2013/08/21/patch-alert-vulnerability-in-active-directory-federation-services-ms13-066/
Patch Alert - Vulnerability in Active Directory Federation Services - MS13-066