sentence1: The first vulnerability is a buffer overrun that results from IE's failure to properly determine an object type returned from a Web server.
sentence2: First up, Microsoft said a buffer overrun vulnerability occurs because IE does not properly determine an object type returned from a Web server.