• info
• discussion
• exploit
• solution
• references

Microsoft Baseline Security Analyzer Plaintext Result File Vulnerability

Multiple proof of concept exploits have been provided by Menashe Eliezer <menashe@finjan.com>:

http://www.finjan.com/mcrc/sec_test.cfm