Details About Internet Explorer 7 Zero-Day Exploit

This is a nice rundown by HD Moore, with all the juicy technical details, of the recent zero-day exploit against Internet Explorer 7. The exploit, inadvertently released by Chinese researchers, involves how IE7 handles XML.

Other details, technical and otherwise, are on the Symantec, MSRC and SearchSecurity's Security Bytes blogs. Microsoft issued its Security Advisory 961051 yesterday.