Looks like you can get a patch for the critical IE vulnerability without relying on MS to maybe deliver their patch by, oh, I dunno when. Thanks to eEye for stepping up.

"The vulnerability has been given a high severity rating by a number of security firms including eEye, which recommends that users disable Active Scripting from within Internet Explorer. However, the company is also offering a temporary patch for those organizations that require the feature."