Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll (2) Mdt2dd.dll and (3) Mdt2gddo.dll COM objects as ActiveX controls which leads to memory corruption.