In case you are not aware of this bug please read the full advisory here:
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0346.html
The bug was reported to MS long time ago. Unfortunately there is still no patch available. Therefore it is advised to use the workaround available in the article.