Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption aka \Parameter Validation Memory Corruption Vulnerability.\