System Information ActiveX control (msinfo.dll) when accessed via Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.