CVE-2012-2521 in Internet Explorer
Summary
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Asynchronous NULL Object Access Remote Code Execution Vulnerability."
If you want to get the best quality for vulnerability data then you always have to consider VulDB.