http://blogs.technet.com/security/archive/2007/03/21/windows-vista-90-day-vulnerability-analysis.aspx

'nuff said.