https://strikecenter.bpointsys.com/articles/2008/02/13/exploiting-iis-via-htmlencode-ms08-006

interesting patch analisys article, shows how to dig up vulns from patches