There are two primary ways that drive-by downloads are done,...

There are two primary ways that drive-by downloads are done, either through a vulnerability in IE itself or an add-on, or because the user has the security setting set too low.