Microsoft Windows 2000 Patch: Hyperterminal Buffer Overflow

From Microsoft:

This update resolves the "HyperTerminal Buffer Overflow" security vulnerability in Windows 2000. If you receive and open an HTML e-mail message that contains a particularly malformed Web address (URL), the URL can be used to exploit this vulnerability and run arbitrary code on your computer.

Note Although HyperTerminal ships as part of several Microsoft products, it was developed by Hilgraeve, Inc. Additional information on the vulnerability and a patch for their full version product, HyperTerminal Private Edition, is available from the Hilgraeve Web site, at http://www.hilgraeve.com.

For more information about these vulnerabilities, please see Microsoft Security Bulletin MS00-079.