From: Mike N. 

On Wed, 10 Jan 2007 23:14:31 -0500, "Geo."  wrote:

>>   An exploitable shared function with a problem only if an app calls it.
>> Furthermore, that function call would need to fall under the control of an
>> external system or file.  No worse than some of the C or Windows Run Time
>> Library exploits of 3-4 years ago that affected many apps.
>
>No worse, no better? How about bigger target?

   Not bigger - it's more like Win32 code is the juicy fruit on the low
hanging branches.  .NET exploits are the scrawny twigs on the top of the
tree.   There may be a few escalation of privilege exploits in there that
may become more popular as Vista, but nothing compared to the holes still
residing in Office apps file formats, and Adobe Hackrobat.

--- BBBS/NT v4.01 Flag-5