Well, that's always an issue.
That's a social engineering hack, not a system hack. If I could send you an e-mail pointing you to dl a .rpm from [link|http://www.red-hat.com|http://www.red-hat.com] (picked out of my ass - that could very well be a valid site), I could very well 0wnZ0r j00.
Now, about the bugs in IE, well, that's another story altogether.
Do I have to tell a story, of a thousand rainy days since we first met. It's a big enough umbrella, but it's always me that ends up getting wet...