I first saw this in The Register, who attributes discovery of the flaw to Mike Benahm, but CNET has a clearer take: The IE problem has been around for at least five years…