[The security hole allows for] full blown remote code execution,.. If a user browses to a bad Web site, malicious software can be installed on their PC without their knowledge.
Tom Ferris