Microsoft has released a security bulletin MS06-055, Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486). Microsoft is issuing a patch to protect systems against the vulnerability, and advises users to update their systems immediately.
This vulnerability allows an attacker to execute malicious code through an HTML page in Internet Explorer, or in an HTML formatted email.