A security researcher found a vulnerability in IE 6.0 and lower.
As a result, a malicious site can compromise a system. This issue
is different from the MS05-14 vulnerability. This vulnerability can
be exploited when a user drags and drops an object from one window
to another and must be in a timely manner. Here’s an answer from
Microsoft
