At this week’s Black Hat DC conference ... Jorge Luis Alvarez Medina, a security consultant with Core Security Technologies ... demonstrated how an attacker can read every file of an IE user’s filesystem. ... [He] leveraged different design features of Internet Explorer that can be combined to do serious damage. ... IE’s Protected Mode prevents exploitation of this vulnerability. ... The problem does affect every version of the browser but is considered most serious on Windows XP.