I've looked over the advisory on Checkpoints Website http://www.checkpoint.com/techsupport/alerts/security_server.html. I'm unsure however whether the vulnerability applies in cases where there is an external content security service, like n2h2 or Websense running on a http resource rule.
this_net   any   http->n2h2  reject
would the vulnerability apply in this case?
Jag