http://www.sqlservercentral.com/blogs/brian_kelley/2005/12/28/-unpatched-microsoft-windows-wmf-vulnerability/

Printed 2013/05/20 01:17AM

Unpatched Microsoft Windows WMF Vulnerability

2005/12/28

If you haven't heard by now, there is an unpatched exploit in how Windows handles WMF files. Since this handling is done with System level privileges, you guessed it, complete control of the system. Secunia sent out an advisory this morning and I noticed that Sunbelt Software had posted about it in their blog.

Secunia Advisory
Sunbelt Software Blog (with example)