Finally, ITsafe (a service run by the UKI government) issues a warning about the WMF exploit. It's pretty vague to be honest:

Title
=====
ITsafe Bulletin 2006/001

What is it?
===========
An attack that uses a problem in the way that Windows XP handles "WMF"
graphics files. Reports are now being received of this being used by a
variety of Malicious Websites, and within Spoofed emails claiming to be New Year's Greetings.

What does it affect?
====================
The flaw is in the Windows XP "image rendering" facility, which is mainly used by Windows "Picture and Fax Viewer", but is also used by the Microsoft Internet Explorer and Mozilla Firefox web browsers to view Windows Meta Files (WMF).

How do I protect myself?
========================
No patch is yet available, but Anti Virus Software suppliers are currently producing fixes, which should be installed as soon as they become available. As always, exercise care when following web page links, particulary those in emails, as we explain in our Guide to URL Security.

Notes
=====
ITsafe Bulletins are issued by e-mail when significant risks have been identified that are likely to affect the majority of ITsafe users.

ITsafe Team
Making IT safe for You

http://www.itsafe.gov.uk

The UK Alerting and Advisory Service for Information and Communications Technologies (ICT) Security

Technorati Tags: WMF

This entry was posted on Sunday, January 1st, 2006 at 18:26 and is filed under In the News. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.