A major security flaw in WMF files means your computer could be infected with viruses, spyware or other malicious programs just by viewing a Web page or an e-mail message or an Instant Message that contains one of the contaminated images. The problem has existed for years, but it was discovered and was publicly announced in late December 2005.

Microsoft has finally released a official patch for the Windows WMF (Windows Meta File) Graphics Rendering Engine vulnerability that left millions of PCs open to viruses, spyware.

Microsoft originally planned to release the update on Tuesday, January 10, 2006 as part of its regular monthly release of security bulletins, once testing for quality and application compatibility was complete. However, testing has been completed earlier than anticipated and the update is ready for release. In addition, Microsoft is releasing the update early in response to strong customer sentiment that the release should be made available as soon as possible.

Microsoft did not release a WMF patch for Windows 98, Windows 98 Second Edition, or Windows Millennium Edition.

Download WMF patch for Microsoft Windows XP SP2 (may require WGA)windowsxp-kb912919-x86-enu.exe
Microsoft Windows 2000 Service Pack 4
Microsoft Windows XP Professional x64 EditionMicrosoft Windows Server 2003

The WMF vulnerability applies to all versions of Windows from 98 onward, Microsoft XP Pro, Microsoft XP Home, Microsoft Windows Server 2003 Datacenter Edition, Microsoft Windows Server 2003 Enterprise Edition and Microsoft Windows Server 2003 Standard Edition.

Microsoft will also release an updated version of its malicious-code-removal tool on Tuesday as part of its monthly security updates.

Security Update for Windows XP (KB912919)
Microsoft Security Bulletin MS06-001
Send to a friend | Permalink | Del.icio.us | Go To Top
Translate: