Please see the following advisory that just came out minutes ago:

http://www.f-secure.com/security/fsc-2008-3.shtml

  Eric