Seems a known flaw in IE that the Gang at Microsoft has not fixed yet has gotten the attention of the MOB and they are hacking mainstream websites and placing the payload on their web pages thus infecting your PC as you drive by.
This flaw is serious in that all you have to do is load the web page and they own you. My advice to everyone is flip your middle finger at Microsoft and go over and install Mozilla Firefox. I switched and I’m never coming back. [ZDNet][Slashdot][The Register] [Techdirt]
According to a story over at Microsoft Watch Microsoft, they say if you are running XP SP2 RC2 then you are not vulnerable, nor are you vulnerable if you have installed MS04-0011. Course being the geek I am, I’m running SP2 and also patched with 0011 when it came out but for some reason I’m running firefox