Buffer overflow on BMP files playing. Buffer overflow on oversized SRC for HTML page with EMBED'ded WMP. May be used for client machine trojaning.
vulners.com/securityvulns/securityvulns:doc:11428
vulners.com/securityvulns/securityvulns:doc:11429
vulners.com/securityvulns/securityvulns:doc:11430
vulners.com/securityvulns/securityvulns:doc:11431
vulners.com/securityvulns/securityvulns:doc:11432