Secunia

A vulnerability has been identified in Internet Explorer (IE), which can be exploited by malicious people to execute arbitrary script code on a user's system.

The vulnerability is caused due to an input validation error in the custom errors generated by IE, when a website returns an error page. The problem is that the requested URL is included, which may allow execution of arbitrary script code in the "My Computer" security zone.

Successful exploitation requires that a user is tricked into visiting a malicious website or click a malicious link. Afterwards, the user must click the link generated by the resource.

Solution
Microsoft has changed the behavior for accessing local resources. In Internet Explorer 6.0 SP1 it is no longer possible to link to local resources from the "Internet zone". This lowers the impact of the vulnerability as it only can be exploited in combination with other vulnerabilities.
Further details available in Customer Area

Provided and/or discovered by
GreyMagic Software

Changelog
Further details available in Customer Area

Original Advisory
http://sec.greymagic.com/adv/gm014-ie/

Deep Links
Links available in Customer Area