The paper describing the attack is here: http://www.blackhat.com/presentations/bh-usa-09/CHEN/BHUSA09...

It makes one wonder how many other peripherals have user programmable firmware.