Just found this (scroll down to “.NET Framework 2.0 Security Hole”) via Marc’s Blog.
Not sure if this is true – but it sounds scary…this brings me back to an old point – don’t run untrusted apps off the Internet – and be careful with technologies that allow this by default ;)