Greg Jones

The issue arises from the improper validation of certain data lengths, allowing remote attackers to execute arbitrary code. This can be achieved by sending a malicious .wri, .rtf, or .doc file via email or hosting it on a malicious website.

The issue is related to an integer overflow in the Install Engine, which can be triggered by a malicious website or HTML email containing a long .CAB file name. This leads to a heap-based buffer overflow, allowing remote attackers to execute arbitrary code.

The issue concerns a problem with rendering certain input tags in HTML, which can cause a denial of service. This results in the browser or Outlook Express crashing when it encounters specific HTML input.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to SP4 Description: The issue allows remote attackers to execute arbitrary code via an HTML document with a long argument to the `RunQuery2` method in the Troubleshooter ActiveX Control (Tshoot.ocx). Recommendations: For versions prior to SP4, update to a newer version to mitigate the risk.

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01 SP3 through 6.0 SP1 Description: A buffer overflow issue in the BR549.DLL ActiveX control allows remote attackers to execute arbitrary code. Recommendations: For Internet Explorer versions 5.01 SP3 through 6.0 SP1, consider disabling the BR549.DLL ActiveX control as a temporary workaround until a patch is available.