http://blogs.technet.com/security/archive/2007/03/21/windows-vista-90-day-vulnerability-analysis.aspx
'nuff said.