If I understand the issue correctly, the bug only exists in the XP version of UPNP. For instance, it's only a problem on 98 if you have installed the UPNP drivers from the XP disc. I could be wrong about this, but that was the impression I got from a quick skim of the article.

You know, all these unchecked buffer vulnerabilities piss me off. If C had originally been designed with a proper String data type to begin with, then none of these bugs would have ever happened.