A dangerous vulnerability in Internet Explorer 6 and 7 became publicly known
before a fix was available, raising the specter of a high-risk zero-day
attack.The bug involves the way IE handles Cascading Style Sheets (CSS) objects,
and could let an attacker run any command on a targeted Windows XP, Vista,
Server 2003, or Server 2008 PC. Bad guys have already posted sample attack code
online. IE 8 is not affected. For more information, see
Microsoft Security Advisory 977981.
