Out of interest, what IS the security issue? That is to say, what does it allow the exploiter to do?