Thanks for that, I hadn't found anything similar. For those who are interested, the report is a vulnerability with S-Voice. It appears you can get the voice commands (Samsung's Siri) to call numbers etc even when the screen is locked.
I couldn't get it to work with my Galaxy Note II - so I don't know whether Samsung have fixed it.
Thanks for the comment.