This same thing has been discussed quite thoroughly on both SecurityFocus' Bugtraq and Focus-MS mailing lists lately. I'd recommend signing up if you really want to keep on the up and up about what vulnerabilities have been discovered.