zert just released a technical analysis of both the vulnerability and the zert patch. there is also a section explaining what the microsoft patch does.

you can find the paper on the zert web page, or linked directly here.

gadi evron,
ge@beyondsecurity.com.