as i understand it this isn't your typical "i found a bug" article. there's proggies in the wild that exploit this quite well