"The fact that [eEye] explained how the virus works, to the point of explaining how you execute the code that exploits it, was too much information," (Microsoft's Richard L.) Smith says.
Publishing bug exploits will be classified as an act of terror, Dude. You can get anything past Congress these days in the name of anti-terror. The DMCA already made it a crime to reverse-engineer encryption schemes. The precedent has been set to criminalize detailed examination of any proprietary code.