IE flaw under SP2: User's problem or Microsoft's?

A security researcher has turned up another problem with Internet Explorer that paves the way for malicious code to sneak by all that Microsoft's Service Pack 2 for Windows XP has to offer (from a security perspective), store itself on a hard drive, and install itself the next time a system boots up.