urlmon.dll <bgsound> tag oversized SRC filename paramter buffer overflow.
vulners.com/securityvulns/securityvulns:doc:11307