Secunia

Two vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to compromise a user's system.

1) An error when handling document objects can be exploited to corrupt memory via a specially crafted web page where an object is appended and deleted in a specific order.

2) An error exists during parsing of CSS (Cascading Style Sheets) in XHTML strict mode when a style sheet contains a specific combination of style directives (one of them being a "zoom"). This can be exploited to corrupt memory via a specially crafted web page.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) An anonymous person via ZDI.
2) Sam Thomas via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
MS09-002 (KB961260):
http://www.microsoft.com/technet/security/bulletin/ms09-002.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-011/
http://www.zerodayinitiative.com/advisories/ZDI-09-012/

Deep Links
Links available in Customer Area