Microsoft Security Bulletin MS06-001 discusses the WMF vulnerability and provides patches for 2k, Xp and Server. W98, 98SE and ME are left unpatched, as Microsoft claims that “although Windows 98, Windows 98 Second Edition, and Windows Millennium Edition do contain the affected component, the vulnerability is not critical because an exploitable attack vector has not been identified that would yield a Critical severity rating for these versions.”
Who should read this document: Customers who use Microsoft Windows
Impact of Vulnerability: Remote Code Execution
Maximum Severity Rating: Critical
Recommendation: Customers should apply the update immediately.