IE, mshtml.dll, oledb32.dll and vulnerability in XML parsing / data binding