Buffer overflow on content parsing. Buffer overflow in ActiveX.
vulners.com/securityvulns/securityvulns:doc:23289
vulners.com/securityvulns/securityvulns:doc:23290