There is an un-handled memory access violation in the OWC11.DataSourceControl. As far as I know, I don't think it is possible to execute code via this, the worst it can do is crash Internet Explorer. PoC as follows: ------------------ ------------------ Elazar _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/