http://securityintelligence.com/ibm-x-force-researcher-finds-significant-vulnerability-in-microsoft-windows/#.VGwQDI0cSUl

vbscript bug that has been around and remotely exploitable since IE 3.0 and windows 95. Even bypasses IE sandboxes and EMET. Should be patched in this months round of updates along with the SChannel bugs.