Multiple vulnerabilities have been reported in Microsoft Internet Explorer, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, and compromise a user's system.

1) An error exists when handling copy and paste operations.

For more information:
SA48031

2) A use-after-free error when handling a HTML time "t:MEDIA" element during a page refresh can be exploited to access a freed "CDispNode" object.

3) An error when handling NULL bytes during the creation and initialisation of strings can be exploited to read process memory.

4) An error when adding VML elements to a "textArea" element incorrectly frees the "cDispScroller" object and can be exploited to cause another object to reference freed memory.

Successful exploitation of vulnerabilities #2 and #4 allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
2, 4) Stephen Fewer, Harmony Security via ZDI
3) The vendor credits Jason Hullinger, HP Cloud Services

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS12-010 (KB2647516):
http://technet.microsoft.com/en-us/security/bulletin/ms12-010

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-035/
http://www.zerodayinitiative.com/advisories/ZDI-12-036/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers