Secunia Research has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when processing data streams and can be exploited to trigger a use-after-free condition by returning a specially crafted data stream of e.g. an unexpected MIME-type for which no handler is registered.

Successful exploitation allows execution of arbitrary code when a user visits a malicious website.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Carsten Eiram, Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2007-100/

MS08-024 (KB947864):
http://www.microsoft.com/technet/security/Bulletin/MS08-024.mspx

Deep Links
Links available to Secunia VIM customers