Remote code execution PoC has been released on metasploit

http://trac.metasploit.com/browser/f..._func_index.rb