Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability

Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability

Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue stems from a design error.

The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in arbitrary code execution. The affected objects are not intended to be instantiated through Internet Explorer.