Memory corruption on Javascript errors processing and Javascript normalize() function. Temporary Internet Files crossite access. Buffer overflow on Windows Address Book (WAB) parsing.
vulners.com/securityvulns/securityvulns:doc:15373
vulners.com/securityvulns/securityvulns:doc:15377
vulners.com/securityvulns/securityvulns:doc:15381
vulners.com/securityvulns/securityvulns:doc:15382