Some excellent news via F-Secure – Microsoft have released the patch for the WMF flaw a few days early and it’s available now. The advisory hasn’t yet been updated but you can install the patch from Windows Update. I advise all of you who use Windows to install this patch immediately.
Update: You can download the patch separately here. Note that on Tuesday Microsoft will be releasing other patches as well as part of its normal patch cycle. The details are here, but in summary there will be critical updates for Windows, Office and Exchange, plus some non-critical updates that do not affect security and a new version of the Malicious Software Removal tool.
Related Posts:
This work, unless otherwise expressly stated, is licensed under a Creative Commons Attribution-ShareAlike 2.0 UK: England & Wales License.
January 6, 2006 at 00:10
You can download the updates from the Security Bulletin page: http://www.microsoft.com/technet/security/bulletin/ms06-001.mspx
January 6, 2006 at 09:13
Also if you’re still using Windows Update, you should think about upgrading to Microsoft Update since it covers more products than just Windows.
http://update.microsoft.com/microsoftupdate/
January 6, 2006 at 16:45
Windows releases security patch for WMF vulnerability early.
I've been meaning to mention the latest Windows flaw that's been the source of much panic. It's a flaw in the graphics rendering engine in how it handles the Windows Metafile Format (WMF) that could allow a remote attacker to execute …