Secunia

A vulnerability has been reported in Internet Explorer (IE), which can be exploited by malicious people to conduct Cross-Site Scripting attacks or execute script code on a user's system.

The vulnerability is caused due to an error in the AutoScan method. This can be exploited to execute arbitrary script code on a user's system or in the security zones associated with other sites. Successful exploitation requires that a user is tricked into visiting a malicious website or click a malicious link.

The vulnerability has been reported in IE 6.0 with no patches applied.

Solution
Update to the latest Service Pack level and apply all patches.

Provided and/or discovered by
Liu Die Yu

Changelog
Further details available in Customer Area

Original Advisory
http://www.safecenter.net/liudieyu/AutoScanJPU/AutoScanJPU-Content.htm

Deep Links
Links available in Customer Area