Stack-based buffer overflow in the Microsoft Java implementation as used in Internet Explorer allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.