Vista and IE Security Rendered Useless (searchsecurity.techtarget.com.au)

By taking advantage of the way that browsers, specifically Internet Explorer, handle active scripting and .NET objects, the pair have been able to load essentially whatever content they want into a location of their choice on a user's machine.