It crashed my Windows dev box (admittedly my fault) when I was testing this bug as it completely consumed the CPU, I had to fill a nice report in for that to Head Office!
Well, apparently the bug has been found and it is possible to fix the bug itself and to patch your own servers to stop this from happening, but sadly this news won’t reach the vast majority of developers and there may be a lot of websites out there that could be targeted if they’re handling floating-point numbers in their form fields as GETs.