Here's an article by one of the researchers with much more information about the vulnerability:

http://www.freedom-to-tinker.com/blog/jhalderm/hacking-dc-in...