CVE-2008-2255 in Internet Explorer
Summary
Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, a different vulnerability than CVE-2008-2254, aka "HTML Object Memory Corruption Vulnerability."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.