Scott Guthrie updated his blog with more info about the ASP.NTE Vulnerability, check it out here: http://weblogs.asp.net/scottgu/archive/2010/09/24/update-on-asp-net-vulnerability.aspx

I would recommend all of you who are managed ASP.Net application to read this:

http://blogs.technet.com/b/msrc/archive/2010/09/17/security-advisory-2416728-released.aspx