There is a vulnerability in the way that a Microsoft Windows library (OleAut32.dll) resizes certain array objects which can lead to remote compromise for users of Internet Explorer and Microsoft Excel.