Microsoft Internet Explorer Scriptlet Rendering Vulnerability
By design, the Scriptlet Component of Microsoft Internet
Explorer (the ActiveX control that invokes scriplets) is only
supposed to render HTML files. However, it will render
any file type, which means a malicious website operator
may gain read access to known files on a remote system
by injecting valid HTML code into a file that would be run
at the privilege level of the Local Computer Zone. Here's
more details and directions to the Microsoft patch.
Microsoft Internet Explorer Scriptlet Rendering Vulnerability (information and patch)