The first vulnerability is a buffer overrun due to IE's failure to properly determine an object type from a Web server.
Microsoft identified a buffer overrun vulnerability in IE due to improper object type determination from Web servers.