A vulnerability in Microsoft Internet Explorer allows arbitrary code execution. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to improper garbage collection when multiple “imports” are used on a “styleSheets” collection. Crafting a long chain of CSS imports in an HTML document results in a memory corruption eventually leading to code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49115/ZDI-06-026.txt
Source: https://packetstormsecurity.com/files/49115/Zero-Day-Initiative-Advisory-06-026.html