Unpatched Vulnerability in IE6, 7, and 8
Microsoft has acknowlegded that there is an unpatched security vulnerability affecting Internet Explorer versions 6, 7, and 8. The problem has to do with how IE processes CSS. Exploit code is publicly available. Until Microsoft makes a patch available, there is little else to do except press your IPS vendors for a filter and your antivirus vendors for detection.