The advisory from Microsoft specifically says it can be exploited over the network with zero user interaction.