Two vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

1) An error when calculating an offset based on uninitialised variables can be exploited to call into an arbitrary memory location.

2) An indexing error when removing a property from an HTML element can be exploited to remove a VARIANT from an array within uninitialised heap-based memory.

Successful exploitation of the vulnerabilities allows execution of arbitrary code via a specially crafted web page.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Jose A. Vazquez via iDefense
2) Omair via iDefense

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS12-044 (KB2719177):
http://technet.microsoft.com/en-us/security/bulletin/ms12-044

iDefense:
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=995
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=994

Deep Links
Links available to Secunia VIM customers