Mr.Niega has discovered a vulnerability in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in inetcomm.dll when processing URLs with the "mhtml:" URI handler. This can be exploited to cause a stack-based buffer overflow via an overly long URL by e.g. tricking a user into visiting a malicious web site with Internet Explorer or opening a specially crafted Internet shortcut.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Mr.Niega

Changelog
Further details available in Customer Area

Original Advisory
MS06-043 (KB920214):
http://www.microsoft.com/technet/security/Bulletin/MS06-043.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area