IE 7 0day allows malware spreading

A patch for Internet Explorer 7 on Windows XP SP2 should be available shortly as a new 0day has been uncovered in a chinese forum.

The 0day seems to be exploiting a vulnerability in XML handling and allows for silent download and execution. More details will be added later.

The story is available here