Typo in Code Caused Latest ActiveX Vulnerability

It's the case of the missing ampersand... article from CNet here