The HPs Zero Day Initiative has disclosed four new zero-day vulnerabilities in Internet Explorer that can be exploited by attackers to remotely execute code. One of the flaws is considered by the experts very critical, it is an AddRow Out-Of-Bounds Memory Access Vulnerability that affects the way that Internet Explorer handles some specific arrays. The experts explained that the flaw affects also Windows Phone. The attack requests the user interaction, targeted users must visit a malicious page or open a malicious file to trigger the exploits.”]
Source: http://securityaffairs.co/wordpress/38805/hacking/zero-day-internet-explorer.html