iDefense Security Advisory 12.09.08 -Remote exploitation of a stack buffer overflow vulnerability while handling specific HTML tags in Microsoft Corp.’s Internet Explorer web browser allows attackers to execute arbitrary code within the context of the affected user. As of September 2008, iDefense confirms that Internet Explorer 5.01 on Windows 2000 SP4, is vulnerable. It also causes denial of service for Internet Explorer 6 on Windows XP SP2. Internet Explorer 7 is not affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72801/12.09.08-1.txt
Source: https://packetstormsecurity.com/files/72801/iDEFENSE-Security-Advisory-2008-12-09.1.html