Yet another flaw with yet another patch. This time with IE & WinXP SP2. Firefox anyone?

"On Tuesday, a Microsoft representative said that the company still believes the claims are misleading because 'significant user interaction and user interface steps have to occur before any malicious code can be executed.' However, the software giant did admit that it was possible to bypass the security warnings in IE--even when using Windows XP with Service Pack 2."