Microsoft Released Patch for Dangerous IE Bug
On Friday CNET News.com reported that Microsoft released a patch for Internet Explorer 5.5 and 6.0 that is meant to close a dangerous hole in the browser. CTDATA originally reported on this flaw last Wednesday. The patch apparently fixes several problems that, if left unpatched, may not become apparent at the same time.
The flaw that is present in IE 6.0 appears particularly dangerous, in that an attacker can "alter HTML information in a way as to trick IE to open a damaging executable file without asking the {user} for confirmation."