Internet Explorer 7 allows the setting of header “Transfer Encoding: chunked” in setRequestHeader exposing the browser to HTTP request splitting/smuggling attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64797/MSA01240108.txt
Source: https://packetstormsecurity.com/files/64797/MSA01240108.txt.html