PC World - A new security hole in Internet Explorer 6 and 7 can be targeted via code on a poisoned *** site, Microsoft warned today. A successful attacker could install malware on a victim PC or run any other remote command.

Source