Serious bug found in Internet Explorer with XP SP2
 

SECUNIA said there are two bugs in Microsoft Internet Explorer which can be exploited by wicked people and which bypass security features in Windows XP SP2.
The bugs were discovered by http-equiv, said Secunia, and compromise systems by insufficient validation of drag and drop events, and related to a security zone restriction error.

http://www.theinquirer.net/?article=19190