Windows 98, 98SE, ME, and XP - Remote Code Execution via UPnP NOTIFY Location URL
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.