CVE-2011-1254 in Internet Explorer
Summary
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Drag and Drop Memory Corruption Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.