IE Flaw Exploited - Security firm identifies exploit technique for known browser hole

Internet Explorer has become an even bigger security risk--even under Windows XP SP2--with the publication of a new and extensive exploit.
Security researchers have warned that the exploit, which takes advantage of known loopholes in SP2, could allow an attacker to run script code on a user's system via a specially crafted Web page.
The holes involved have been known publicly for more than two months, but previous exploit techniques required the user to take actions such as dragging an image from one part of a Web page to another. The new exploit--a demonstration of which has been published by Danish security firm Secunia--is fully automated, requiring the user only to visit a Web page in Explorer. Other browsers and operating systems aren't affected.