Some vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

1) An error within the instantiation of COM objects (Imjpcksid.dll and Imjpskdic.dll) not intended to be instantiated in Internet Explorer can be exploited to cause a memory corruption.

2) Another error within the instantiation of COM objects (Msb1fren.dll, Htmlmm.ocx, and Blnmgrps.dll) not intended to be instantiated in Internet Explorer can be exploited to cause a memory corruption.

3) An off-by-one error in wininet.dll within the parsing of FTP server responses can be exploited to cause memory corruption via specially crafted responses sent to the FTP client in Internet Explorer.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) Reported by the vendor.
2) The vendor credits H D Moore, BreakingPoint Systems.
3) Greg MacManus, iDefense Labs.

Changelog
Further details available in Customer Area

Original Advisory
MS07-016 (KB928090):
http://www.microsoft.com/technet/security/Bulletin/MS07-016.mspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area