Security threats Toolkit
Story: Microsoft: DRM Trojan hole is not a vulnerability
Microsoft probably has no incentive to fix this. As I understand it, the one and only security fix is called "upgrading to XP-SP2", and all earlier versions of I.E. are now official (as opposed to unofficial) security risks. This sounds like a perfect excuse for MS to ask everyone to migrate to XP - or else.
Full Talkback thread






