ZDI-09-047: Microsoft Internet Explorer getElementsByTagName Memory Corruption Vulnerability Aug 05 2009 05:44PM：SecurityFocus（情報元のブックマーク数）

IEの脆弱性？みたい。ふむぅ

-- Vulnerability Details: 
This vulnerability allows remote attackers to execute arbitrary code on 
vulnerable installations of Microsoft Internet Explorer. User 
interaction is required to exploit this vulnerability in that the target 
must visit a malicious page. 
 
The specific flaw exists in the appending of elements to an invalid 
object. When appending malformed elements to a empty DIV element memory 
corruption can occur. A properly constructed web page can result in 
remote code execution under the context of the current user.