Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.
Affected Platforms
Microsoft Internet ExplorerMicrosoft Windows XpMicrosoft Windows 2000Microsoft Windows VistaMicrosoft Windows 2003 Server