Multiple vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to conduct phishing attacks or compromise a user's system.

1) An error within the instantiation of Urlmon.dll COM objects not intended to be instantiated in Internet Explorer can be exploited to corrupt memory.

2) An error in the handling of CSS (Cascading Style Sheet) tags can be exploited to corrupt memory via a specially crafted web page.

3) A race condition when attempting to install multiple language packs can be exploited to corrupt memory via a specially crafted web page.

4) An error in the handling of prototype variables that point to an already deleted table cell can be exploited to corrupt memory via a specially crafted web page.

5) Boundary errors within the ActiveListen (XListen.dll) and ActiveVoice (XVoice.dll) ActiveX controls of Microsoft Speech when handling certain methods or properties (e.g. "FindEngine()") can be exploited to cause stack-based or heap-based buffer overflows when a user visits a malicious website.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) An anonymous researcher, reported via iDefense Labs.
2) Reported by the vendor.
3) An anonymous researcher and reported via ZDI.
4) Sam Thomas, reported via ZDI.
5) Independently discovered by:
* Will Dormann, CERT/CC
* cocoruder, Fortinet Security Research

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-033 (KB933566):
http://www.microsoft.com/technet/security/Bulletin/MS07-033.mspx

Fortinet:
http://www.fortiguardcenter.com/advisory/FGA-2007-08.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=542

US-CERT VU#507433:
http://www.kb.cert.org/vuls/id/507433

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-037.html
http://www.zerodayinitiative.com/advisories/ZDI-07-038.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers