Microsoft Internet Explorer 4/5 overflows when the handling of "file://" specification. (file://test/AAAAAAAAAAAA....) This is a typical exploitable buffer overflow. Exploit for Japanese Win98 included.
0bbb99826ab282a9e58564f00c20bed11d1fe94dcf5363010665bfb51873d053