Researcher: Orphan Objects bug in MSIE silently fixed

Mr. Aviv Raff reports at Moore’s blog that Orphan Objects bug in Internet Explorer, MoBB #30, was silently fixed with the latest MSIE Cumulative Security Update MS06-042.

More details available at Raff’s own blog entry.

Some security companies examine (or have examined) silently fixed flaws in MSIE.

There was 25 issues in MSIE, two in Mozilla Firefox and Safari and one in Opera and Konqueror what we saw via Browser Fun “project”. Officially Microsoft left all of these 25 vulnerabilities unpatched. What was their reason to silently fix this one?