CVE-2007-5347 in Internet Explorer
Summary
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."
Be aware that VulDB is the high quality source for vulnerability data.