More information is available from Microsoft in the FAQ and the bulletin . The CERT advisory is here . A patch for a security flaw in the Microsoft HTML Help Facility has been released. The flaw could allow a malevolent web site operator to take potentially nasty actions on your computer, and it is recommended by Microsoft that all users of affected versions of Internet Explorer apply the patch. Details are available in this bulletin , which has links to the patches, and this FAQ .
Details are here .
The details are in this document . This is a highly recommended patch. The flaw could allow a malevolent web site operator or email correspondant to crash your machine or take any action on the machine that you could take. The flaws are not in web browsers or email readers themselves, but are most easily exploited when you use one of those HTML-enabled programs. Separate patches have been made available for Windows 95 and 98.