It's good to see responsible public disclosure of such vulnerabilities so that vulnerable users can take steps to protect themselves. Bravo.

I wonder when the company will issue a patch for this, and what form it might take...