A number of issues have been reported lately by various sources about Internet Explorer vulnerabilities in relation to specific COM objects. Research has shown that the root cause is the fact that these COM objects are not designed to be loaded in IE at all. These objects therefore make wrongful assumptions about the state of the process they are loaded into, specifically about the contents of heap memory. This can be abused to uncover unwanted features, like the ability to run arbitrary code on a victims machine.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39479/comBad.txt
Source: https://packetstormsecurity.com/files/39479/comBad.txt.html