I agree with you, the problem seems to be with the vendor who plugs into Vista. However Vista should probably do a better job of validating the data that it's receiving from the smart card. Buffer overflows, once again.

Idle thought, is it possible to prevent buffer overflows by changing the design of the hardware, say something on the cpu rather than in software?

Paris because she might know more about CPU design than me.