Microsoft has updated their Cumulative Patch for Internet Explorer (324929)

This is an updated bulletin describing a cumulative patch for Internet Explorer 5.5 and 6.0. The original patch released on December 4, 2002 is unchanged. However since releasing the patch, Microsoft has received a report suggesting that the vulnerability addressed by this bulletin could be exploited to run arbitrary code on a user's machine. Microsoft investigated that report, and was able to develop a demonstration that exploits the vulnerability to run arbitrary code. We have released this updated bulletin to advise customers of our new assessment of the potential impact of the vulnerability, and of its updated severity rating.

Read more