This vulnerability was discovered on 7 November and Microsoft released a patch for it today. I hope it comes down into my K1000 patch feed soon! Management wants me to install it on test machines asap!