[johnong]

Apparently there was a similar vulnerability in Dec 2010 as well. What is the difference btween this and then? https://technet.microsoft.com/library/security/ms10-091

[mynameisvlad]

The CVE for the new one is much more descriptive about what the problem actually is: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3...

I couldn't immediately find a CVE for the old one, and Microsoft's security disclosures seem more suited towards IT pros and consumers, so they don't seem to have full details about what happened in that one.