CVE-2006-4627
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
Date published : 2006-09-07
http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918