Windows Metafile Exploit

[billroper]

Apparently someone has found a way to exploit the Windows Metafile Viewer on -- at least! -- Windows XP and cause it to execute malicious code. Right now, it seems to be being used to install crapware on your machine, but that could change.

Here's EWeek on the subject.

Here are a couple of (relatively ugly) workarounds.

Comments

[pbristow.livejournal.com]

Not just XP. See the top two entries here.

(F_secure produce the F_prot antivirus tool.)

[johno.livejournal.com]

My $employer$ took the big club to this issue yesterday.

Any message with a WMF file attached is discarded on arrival.