We're still investigating, but we have confirmed this vulnerability and I am writing a Microsoft ( Profile , Products , Articles ) Security Advisory on this. We will address it in a security update.

In order to keep the code churn in security updates to a minimum, we try to avoid, as a general rule, including other code fixes for performance issues such as this.

As it turns out, these crashes are not exploitable but are instead Windows performance issues that could cause some WMF applications to unexpectedly exit. These issues do not allow an attacker to run code or crash the operating system. They may cause the WMF application to crash, in which case the user may restart the application and resume activity.

We had previously identified these issues as part of our ongoing code maintenance and are evaluating them for inclusion in the next service pack .

Security is like virginity: you're either a virgin or you're not. You either have security or you don't.

After 9/11, the nation is struggling to really balance national security with civil liberties, ... I'm writing as someone who's lived this struggle.