WMF 0-day looks bad

[sydspirit2]

Hello All.
Here is the latest on the WMF 0-day exploit. I have applied the previous version patch with no problems(XPpro sp2). This looks and sounds real serious.

http://isc.sans.org/diary.php

...this link will change sometime Monday, Jan 2, just use previous button on bottom of page.

 

[eyec]

i edited my WMF file types to take no action when it runs accross a WMF file.

until MS puts out a patch i can live without looking at them - besides few people i deal with use them.