The vulnerability was patched a couple of versions ago,at least.Been using ZA for quite some time now with no problems.I've run more thorough tests from sites other than those at GRC with satisfactory results.You may just have a configuration problem.You don't state the version you used,even if you're using an older version a mutex patch from an independent source has been available for this since at least January of this year.
