CVE-2004-0978

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01 through 6

Description: A heap-based buffer overflow issue exists in the Hrtbeat.ocx (Heartbeat) ActiveX control. This issue can be exploited by remote attackers to execute arbitrary code when users visit specific online gaming sites associated with MSN. The exploitation is possible via the SetupData parameter.

Recommendations: For Internet Explorer versions 5.01 through 6, consider disabling the Hrtbeat.ocx (Heartbeat) ActiveX control as a temporary workaround until a patch is available. Restrict access to online gaming sites associated with MSN to minimize the risk of exploitation. Avoid using the SetupData parameter in the affected ActiveX control until the issue is resolved.