this patch is more of an automation of the microsoft suggested workaround, using a killbit for both vulnerabilities.

a full patch, very nicely built, is available from determina for setslice(), for limited versions of windows.

gadi evron,
ge@beyondsecurity.com.