Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0 5.0 and 5.1 allows remote attackers to cause a denial of service or execute code aka \Microsoft-discovered variant of Chunked Encoding buffer overrun.\