Because a patch will not be available until January 10, 2006, there is a seven day window that attackers could exploit this issue in a potentially widespread and serious fashion. People should be very cautious about the Web sites they visit and the e-mails they receive over the next week.

Alfred Huger