Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when \multiple imports are used on a styleSheets collection\ to construct a chain of Cascading Style Sheets (CSS) which allows remote attackers to execute arbitrary code via unspecified vectors.