The first vulnerability is the buffer overrun that results from IE 's failure to properly determine an object type returned from the Web server .
First up , Microsoft said the buffer overrun vulnerability occurs because IE does not properly determine an object type returned from the Web server .