Is this the :// exploit? If so, this has been known for a long time, and it's just now being "discovered" by Microsoft.. oh boy.