Many Windows operating systems (most are Windows Server) are said to be vulnerable to IIS resource exhaustion DoS attacks.
