They say MacDefender is scareware, aka phishing, aka relying on user stupidity to enter the admin password when it asks for it. That's not vunerable, that's doing what the user told it to do.