For any IE users a patch has now been released by MS to address this particular 'vulnerability':
http://news.bbc.co.uk/1/hi/technology/8469632.stm
This one has been issued 3 weeks outside of their regular (monthly) updates so I think it's fair to say it's pretty important