The flaw exists only in IE 5.01 with Service Pack 4 on Windows 2000 and IE 5.5 with Service Pack 2 on Windows ME, Microsoft said in a security advisory. Users could be attacked simply by viewing a malicious image on a Web site, in an e-mail or in an image viewer, Microsoft said.“An attacker who successfully exploited this vulnerability could take complete control of the affected system,” Microsoft said in its advisory.
Read the rest of the story here:
http://news.zdnet.com/2100-1009_22-6036476.html?tag=nl.e622