The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5 3.5 SP1 3.5.1 and 4 and the Management OData IIS Extension on Windows Server 2012 allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests aka \Replace Denial of Service Vulnerability.\