According to the US Computer Emergency Response Team (US-CERT), the vulnerability lies in the way IE 6 handles attempted cross-site scripting attacks.

• 据美国计算机紧急反应小组（美证书） ，脆弱性，关键在方法及IE 6处理，企图跨站点脚本攻击。