Microsoft on the WMF Patch

Microsoft has announced that they plan on releasing an official patch to the WMF exploit. Good news, right? The problem is that the release plan is for January 10, a whole week from today.

While the WMF exploit has not been exploited very much yet, that could change very quickly as the bugs get designed and implemented. It is a race of sorts between those who make viruses and Microsoft. It could get ugly rather quickly, but let’s hope that it does not.

There is an unofficial patch available, Microsoft recommends that you do not use this patch but rather you should wait. If you want to wait make sure that you disable shimgvw.dll (Start Menu > Run > regsvr32 /u shimgvw.dll).