Secunia Research has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a memory corruption error within the handling of certain exceptional conditions. This can e.g. be exploited by registering an exception handler for an object and then trigger a certain condition via e.g. a certain sequence of nested "object" HTML tags.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious web site.

NOTE: This vulnerability is a variant of a browser crash bug initially reported by Michal Zalewski.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Andreas Sandblad, Secunia Research.

Initial crash bug discovered by:
Michal Zalewski

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS06-021 (KB916281):
http://www.microsoft.com/technet/security/Bulletin/MS06-021.mspx

Secunia Research:
http://secunia.com/secunia_research/2006-41/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers