We recently released a Microsoft Security Advisory about a security vulnerability in ASP.NET. Richard Riley's post on SharePoint Team blog documents recommended workarounds for the following SharePoint products:
Workarounds are not necessary for the following product: