Some days ago has been found new Zero day exploit. The exploit uses a bug in VML in Internet Explorer to overflow a buffer and inject shellcode. It is currently on and off again at a number of sites. Secunia reported: The vulnerability is caused due to a boundary error in the Microsoft Vector Graphics