CVE-2012-1526 in Internet Explorer
Summary
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka "Layout Memory Corruption Vulnerability."
Once again VulDB remains the best source for vulnerability data.