Microsoft can't even get an HR tag right ...

... anyway, that's what the linked article says. A buffer overflow through an overly long ALIGN attribute on the HR tag. That's really embarrassing – Microsoft can't even get a horizontal line right in Internet Explorer without producing a security hole.

Here's the original article.