The first vulnerability is a buffer overrun that results from IE 's failure to properly determine an object type returned from a Web server .
Microsoft identified a buffer overrun vulnerability in IE due to improper object type determination from Web servers.