This is particularly bad news when you couple it with the Flash vulnerability that's gonna be open for a few weeks.
You exploit a couple big OpenX installs, put some Flash ads in there and infect a whole lot of users.
On a sidenote, are there any less complex, preferably open-source, alternatives to OpenX?