What might an attacker use the vulnerability to do?
An attacker who successfully exploited this vulnerability could
take complete control of the affected system. In a Web-based attack
scenario, an attacker would host a Web site that exploits this
vulnerability. An attacker would have no way to force users to
visit a malicious Web site. Instead, an attacker would have to
persuade them to visit the Web site, typically by getting them to
click a link that takes them to the attacker's site. It could also
be possible to display specially crafted Web content by using
banner advertisements or by using other methods to deliver Web
content to affected systems.
If I block .wmf files by extension, can this protect me against
attempts to exploit this vulnerability?
No. Because the Graphics Rendering Engine determines file type by
means other than just looking at the file extensions, it is
possible for WMF files with changed extensions to still be rendered
in a way that could exploit the vulnerability.
Check
out how a virus made use of this vulnerability to infect a
pc...
