Well that's ugly.  Embed a JS redirect via some XSS to a server running that wincrasher script and you could start bringing down a lot of boxes out there.<p>Hope this is fixed asap.  I'm just starting to really like Win 7.