Reply to comment

Submitted by Anonymous (not verified) on Sat, 01/23/2010 - 5:19pm.

Actually, August. The underlying issue is CVE-2010-0248 [ http://www.zerodayinitiative.com/advisories/ZDI-10-014/ ]. They knew about the underlying refcount issue then, and there are many ways to exploit it, only one of which is CVE-2010-0249. It was first discovered by Peter Vruegdenhil.

They may not even all be patched now.