Here is a link that sheds a little more light on the situation. http://arstechnica.com/news/posts/1084683212.html
Now with out a significant portion of the code or an official statement from Cisco it will be hard to tell what’s real and what’s BS.

I wonder how many vulnerabilities will see from this if the whole code ends up in circulation?