This is a pretty nasty exploit. Hopefully Apple has a fix in the pipeline that will see the light of day soon.