Microsoft DDS Library Shape Control (Msdds.dll) exploit
 

Received an email today from our contact at MS about the msdds.dll exploit announced recently. They've amended the original advisory, but are still playing down fears that this is going to be a show-stopper. There's a list of workarounds that can be used by anyone affected here.

Incidentally, it's a shame that this wasn't reported to MS before being made public. I moan about MS and their record on patching stuff, but this irresponsible behaviour really doesn't help anyone.