Risk: High
Microsoft Security Bulletin MS05-053
The Redmond software company has released the latest security bulletin revealing vulnerabilities in its Graphics Rendering Engine that could allow code execution.
The vulnerabilities concern the rendering of Windows Metafile (WMF) and Enhanced Metafile (EMF) image formats that could allow remote code execution on an affected system, or could lead to a denial of service attack. Any program that renders WMF or EMF images on the affected systems could be vulnerable to these attacks. An attacker who successfully exploited this vulnerability could take complete control of an affected system, or could cause the affected programs to stop responding.
Mitigating factors and workarounds are available in the vendor's website referenced below.