I got this vulnerability alert from bugtraq in November
and MS hasn't released a patch for it yet. Setting
active scripting to Prompt is the only work-around and is
very frustrating to users, but I have no choice since the
bug is so lethal. When will a patch for this
vulnerability be released? Thanks.
http://www.securityfocus.com/archive/1/345614/2003-11-
23/2003-11-29/0
Aaron Geiger