MS10-018 - Critical Internet Explorer update now available
Microsoft issued an out-of-band special security update for all versions of Internet Explorer. While the most critical update applies to IE 6 and 7, there are also some critical updates for version 8. The planned IE cumulative update for April 13, 2010 was released for all users two weeks early.
MS10-018 - Critical Internet Explorer Update
http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx
MSRC - MS10-018 Detailed analysis
http://blogs.technet.com/msrc/archive/2010/03/30/security-bulletin-ms10-018-released.aspx
QUOTE: MS10-018 is a typical cumulative update for Internet Explorer and was originally going to be released during the normal update cycle on the 13th of April.
SANS - Internet Storm Center analysis
http://isc.sans.org/diary.html?storyid=8533
QUOTE: This update resolves 10 different vulnerabilities in Internet Explorer, of which the most severe impact can be execution of arbitrary code. All versions of IE from 5.01 to 8.0 are affected to varying degrees. Both servers and workstations should be updated. The update replaces MS10-002, and addresses the MS Advisory 981374 vulnerability. Time to patch