The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4 6 on Windows XP SP2 and SP3 and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function aka \Memory Corruption Vulnerability.\