When Internet Explorer attempts to access an object in memory that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.