Already discussed here and in the following posts. Note that this article is 1 year old, and the vulnerabilities were fixed long ago.