I think we've dodged the bullet on this one.. but I bet you that the WMF handling subsystem is full of holes like this, so I guess the bad guys will keep looking around all the legacy crap with Microsoft still bundle with their OSes.