Another major security hole in ie

1

check this out
http://www.security.nnov.ru/search/document.asp?docid=7301

and here
http://crapware.lx.ro/junkcode/security/ie-sp1-sysimage-local-file-existence.htm