Microsoft's patch for the WMF vulnerability

Microsoft Security Bulletin MS06-001 discusses the WMF vulnerability and provides patches for 2k, Xp and Server. W98, 98SE and ME are left unpatched, as Microsoft claims that “although Windows 98, Windows 98 Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical because an exploitable attack vector has not been identified that would yield a Critical severity rating for these versions.”

Who should read this document: Customers who use Microsoft Windows

Impact of Vulnerability: Remote Code Execution

Maximum Severity Rating: Critical

Recommendation: Customers should apply the update immediately.

Microsoft