Microsoft became aware of attacks on some customers involving a security
vulnerability in the Windows Meta File (WMF) code area in the Windows
platform. Windows Meta Files are image files used by popular applications
such as Microsoft Word.
Exploits have typically been used to install spyware and adware, although
the threat of virus and worm exploits exists. Users can be infected simply
by visiting a web site with an image file containing the WMF exploit.
Microsoft is urging customers to be cautious when opening e-mail and links
in e-mail from untrusted sources. They further encouraged customers to keep
anti-virus software up-to-date.
1/5/06
Microsoft has released a patch for the Windows WMF flaw today in response to consumer inquiries. Earlier reports suggest Microsoft was not releasing this patch until the 10th.
Windows Meta File (WMF) vulnerability patch for Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
These following software updates can be found
HERE for the following O.S
Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service Pack 2
Microsoft Windows XP Professional x64 Edition
Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 for Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems
Microsoft Windows Server 2003 x64 Edition