Referring to my blog post a few days ago, a Security update for this vulnerability in IE6 is now released. More information about Bulletin MS10-002 here and you can also watch a on-demand web cast here