The patch also fixes a vulnerability that results because IE does not implement an appropriate block on a file download dialog box .