I made a flash video of my ANI exploit for IE7 and Firefox on Vista. It's interesting that the protected mode of IE does not stop the execution of cmd.exe, but it does prevent you from writing to the file system once you get the shell. http://determina.blogspot.com/ Alex