http://www.microsoft.com/technet/security/Bulletin/ms08-dec.mspx

Microsoft recently announced that a special, out-of-cycle patch would be released on Dec. 17 for Internet Explorer’s latest security vulnerability, the so-called XML exploit.

This Web page, which began as an announcement of the planned patch, changes automatically to information about installing the patch as soon as the fix is released.

Recently a serious security flaw was found in IE that could allow criminals to take control of people’s computers and steal their passwords, leading to security experts urging consumers to switch to IE’s rivals.