Microsoft Internet Explorer 6 and 7 accesses uninitialized memory which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors aka \HTML Object Memory Corruption Vulnerability.\