A vulnerability in Microsoft Internet Explorer allows arbitrary code execution. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists due to improper handling of CSS class values. Accessing a specially crafted CSS element via document.getElementByID causes a memory corruption eventually leading to code execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49116/ZDI-06-027.txt
Source: https://packetstormsecurity.com/files/49116/Zero-Day-Initiative-Advisory-06-027.html