First Bug Found In Leaked Windows Source Code

The first vulnerability to emerge from someone looking over the recently leaked Windows source code is out. It appears Internet Explorer 5 is vulnerable to a buffer overflow exploit when an attacker creates a malicious bitmap image.

The researcher who discovered the vulnerability provided proof that he had found it by looking through the leaked source code, by providing the filename 'win2k/private/inet/mshtml/src/site/download/imgbmp.cxx'
and the part of the C code that is vulnerable