As it turns out, these crashes are not exploitable but are instead Windows performance issues that could cause some WMF applications to unexpectedly exit. These issues do not allow an attacker to run code or crash the operating system. They may cause the WMF application to crash, in which case the user may restart the application and resume activity. |
In order to keep the code churn in security updates to a minimum, we try to avoid, as a general rule, including other code fixes for performance issues such as this. |
We had previously identified these issues as part of our ongoing code maintenance and are evaluating them for inclusion in the next service pack . |
We have confirmed this vulnerability. I am writing a Microsoft Security Advisory on this…but we wanted to make sure customers knew we were aware of this and we will address it in a security update. |
We're still investigating, but we have confirmed this vulnerability and I am writing a Microsoft ( Profile , Products , Articles ) Security Advisory on this. We will address it in a security update. |