Microsoft Internet Explorer 7 when XHTML strict mode is used allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document aka \CSS Memory Corruption Vulnerability.\