vbscript bug that has been around and remotely exploitable since IE 3.0 and windows 95. Even bypasses IE sandboxes and EMET. Should be patched in this months round of updates along with the SChannel bugs.
These links are referral codes
Geekzone broadband switch | Eletcricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Coinbase | TheMarket | My technology disclosure