The CVE for the new one is much more descriptive about what the problem actually is: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3956 http://www.

The CVE for the new one is much more descriptive about what the problem actually is: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3956 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3... I couldn't immediately find a CVE for the old one, and Microsoft's security disclosures seem more suited towards IT pros and consumers, so they don't seem to have full details about what happened in that one.