The ASP.NET Chart controls in Microsoft .NET Framework 4 and Chart Control for Microsoft .NET Framework 3.5 SP1 do not properly verify functions in URIs which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request aka \Chart Control Information Disclosure Vulnerability.\