The attackers can then use this object to perform further operations such as modification of security flag in ActiveX.  To prevent such attacks, a better idea is to detect if an arbitrary address is accessed during execution.