CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression.

Date published : 2006-08-22

http://www.securityfocus.com/bid/19667

http://www.securityfocus.com/archive/1/444046/100/0/threaded