Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0 Windows NT 4.0 Terminal Server Edition Windows 2000 and Windows XP allows remote attackers to execute arbitrary code as demonstrated via a WebDAV request to IIS 5.0.