I'm not an IE (or CGI) expert, so these are just guesses, but I'm hoping one of them helps.

If your user has IE set up to open PDF files without asking, could you just issue a redirect header to the PDF file?

And what happens if you don't specify disposition?
--
Mike