source: https://www.securityfocus.com/bid/33494/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue may allow an attacker to crash the browser, which will result in a denial-of-service condition. Internet Explorer 7 on Windows XP SP3 is vulnerable; other versions running on different platforms may also be affected. NOTE: This issue was originally published as a buffer-overflow vulnerability that could result in remote code execution. Further analysis and vendor reports, however, suggest that exploiting this issue may cause only a denial-of-service condition from stack exhaustion. This vulnerability cannot be exploited to execute arbitrary code.