The bug, publicly detailed on December 9th by "Zap the Dingbat," is an easily exploited flaw in the way Internet Explorer displays URLs in the address bar: it turns out the browser is incapable of displaying the special character "%01," or anything following it, in a Web address.
Source: SecurityFocus
