    Sentence 1: The first vulnerability is a buffer  overrun that results from IE 's failure to  from a Web server.    Sentence 2: First up , Microsoft said a buffer  overrun vulnetability occurs‘because IE does  not properly determine an object type  returned from a Web server .