Technical Cyber Security Alert TA08-352A – Microsoft Internet Explorer contains an invalid pointer vulnerability in its data binding code, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Exploit code for this vulnerability is publicly available and is being actively exploited.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/73167/TA08-352A.txt
Source: https://packetstormsecurity.com/files/73167/Technical-Cyber-Security-Alert-2008-352A.html