Zero Day Initiative Advisory 08-083 – This vulnerability allows remote attackers to execute arbitrary code through vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists within the Microsoft Animation ActiveX control MSCOMCT2.OCX. When parsing a malformed AVI file through this control an exploitable heap corruption can occur. As the AVI file can be loaded over a UNC path this issue is remotely exploitable and can result in arbitrary code execution under the context of the current user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/72805/ZDI-08-083.txt
Source: https://packetstormsecurity.com/files/72805/Zero-Day-Initiative-Advisory-08-083.html