sentence1: The first vulnerability is a buffer overrun that results from IE 's failure to properly determine an object type returned from a Web server .
sentence2: First up , Microsoft said a buffer overrun vulnerability occurs because IE does not properly determine an object type returned from a Web server .