Secunia

iDEFENSE has reported a vulnerability in Internet Explorer, which can be exploited by malicious people to bypass certain frame scripting restrictions.

The vulnerability is caused due to an access validation error within the event handling routines. This makes it possible for script code in a frame associated with one domain to interact with certain events like keystrokes typed in a frame associated with a different domain.

Successful exploitation potentially allows capturing sensitive information like user credentials or credit card information typed in a frame associated with another site, if a user is tricked into following a link.

Solution
Microsoft has reportedly not categorised this as a vulnerability, but will address it in a future service pack.
Further details available in Customer Area

Provided and/or discovered by
iDEFENSE

Original Advisory
http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities

Deep Links
Links available in Customer Area