Use after free in ActiveX object by providing a malformed argument to a method
CVE-2009-3616
use-after-free by disconnecting during data transfer, or a message containing incorrect data types
CVE-2009-3553