Windows WMF patch promised for next week
‘Extremely critical’ vulnerability to remain unpatched for another week
Microsoft will issue patch for a widely abused security vulnerability in the Windows operating system next Tuesday as part of its monthly cycle, the company said in an update of the security advisory about the flaw.
Attackers could use the vulnerability to take control of a computer through a specially crafted Windows Metafile (.wmf) image.
Such an image can be used on a website or sent by email or in an instant message. Security vendors have reported that attackers are actively using all these methods in an attempt to infect systems.
Security website Secunia gave the vulnerability its most severe rating of ‘extremely critical’.
Full article: vnunet.com