Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069
No PoCs found on GitHub currently.