When Microsoft released the MS08-001 security bulletin earlier this year they were careful to note mitigating factors that made it difficult to exploit. "Attacks attempting to exploit this vulnerability would most likely result in a denial of service condition. However remote code execution could be possible."

Exploit for MS08-001 Demonstrated - Security Watch