Even without reading the article, I have a feeling I know what this is and I'm going to say this:

I have a rule: Never take any security threat that originates from grc.com seriously.

Had this originated from any other source I'd be more worred but since it comes from Steve Gibson, who is the master of FUD and overstating risks, any credibility it would otherwise have had.

If you try and open the file C:\Windows\PCHEALTH\HELPCTR\SYSTEM\DFS\uplddrvinfo.htm in IE6 you will found that it use some sort of ActiveX control; and if you try to diable activeX in the internet zone security setting, then this should be no issue at all, only those allow ActiveX control and plugins in their internet zone are open to vandals like that.

just rename or delete "uplddrvinfo.htm" and it will stop this hole, sp1 does indeed fix this also.

i respect him as well, sometimes he gets a little too excited about security holes, like the time he was getting DoS attacks from those "script kiddies". Other than that he now has a utility on www.grc.com called "XPdite" that fixes this hole.

Majorgeeks can kiss my ass, I joined a while ago, and I just about instantly regretted it. After about a week or so, I was gone, and I will never go back, even to download stuff.
I realize you are talking about something else, but I felt the need to say that.

Yeah, that pretty much describes me...

That link is to Majorgeeks, and that's what brought it on.
I joined, and they were pretty harsh to me, because I put a thread in the wrong forum. ;( I took it the wrong way. The head guy there posted in a thread that a mod closed, and I couldn't reply to it, and it had some things in there, that I really didn't take kindly to, so I left. Partly my fault, partly theirs.