Not according to the article, which says the vulnerable path runs "during the TCP handshake, ..."