Be warned that there is a new nasty out in the wild. But contrary to the same old rumour mill, if you practice good internet usage (or safe internet practices) then you won’t be at risk from attack.

The following is an excerpt from the advisory from Microsoft. Click the link to visit and read the full article and any updates.

Microsoft Security Advisory (912840): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution.

What is the scope of the advisory?
Microsoft is aware of a new vulnerability report affecting the Graphics Rendering Engine in Microsoft Windows. This vulnerability affects the software that is listed in the “Overview” section.
Is this a security vulnerability that requires Microsoft to issue a security update?
Yes, Microsoft has confirmed this vulnerability and will include the fix for this issue in an upcoming security bulletin.
What causes the vulnerability?
A vulnerability exists in the way specially crafted Windows Metafile (WMF) images are handled that could allow arbitrary code to be executed.
What is the Windows Metafile (WMF) image format?
A Windows Metafile (WMF) image is a 16-bit metafile format that can contain both vector information and bitmap information. It is optimized for the Windows operating system.

For more information about image types and formats, see Microsoft Knowledge Base Article 320314. Additional information about these file formats is also available at the MSDN Library Web site.

To be at risk from this vulnerability you would need to visit a site that was specifically created (or altered) to use a special WMF file or open up an email with such an image in it. So if you visit sites you don’t know or trust, or open emails from the same, you are asking for trouble and not just from this new vulnerability. Go Google for safe web practices !!!