1
Regarding a previous post on xoops.org earlier this week regarding malicious .wmf image files
a new update has been released by Microsoft to address and fix the vulnerability in windows software caused by these malicious scripts.
the article and related download links are found here
http://www.microsoft.com/technet/security/bulletin/ms06-001.mspxinfo:
Graphics Rendering Engine Vulnerability - CVE-2005-4560:
A remote code execution vulnerability exists in the Graphics Rendering Engine because of the way that it handles Windows Metafile (WMF) images. An attacker could exploit the vulnerability by constructing a specially crafted WMF image that could potentially allow remote code execution if a user visited a malicious Web site or opened a specially crafted attachment in e-mail. An attacker who successfully exploited this vulnerability could take complete control of an affected system.
it is advisable that any windows users update their system asap. especially if you don't use auto update.