MS07-009 Full Exploit Code in the Wild

A new advisory by WebSense has pointed to the fact that what was previously a DoS condition, has now been found to be exploitable, and in the wild. This is a vulnerability in ADODB which was disclosed during the Month of Browser Bugs last July (specifically #29), and patched in February as MS07-009.

We will, of course, be on the lookout for developments related to the proliferation of the exploit code into more websites.