A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to trick users into disclosing sensitive information.

For more information:
SA20442

The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 or 7 on Microsoft Windows XP SP2. Other versions may also be affected.

Solution
Disable Active Scripting support.
Further details available to Secunia VIM customers

Provided and/or discovered by
Additional Information:
Michal Zalewski

Changelog
Further details available to Secunia VIM customers

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers