Hackers have created a range of Trojan programs which exploit a dangerous new Windows Meta File vulnerability. The vulnerability is rated critical, and so far, no patch has been issued.

The WMF vulnerability exists in computers running Microsoft Windows XP with SP1 and SP2, and Microsoft Windows Server 2003 and stems from a flaw in a utility used to view picture and fax files. The security flaw might be exploited by inducing victims to view maliciously constructed sites, particularly where IE is used as a browser, or when previewing *.wmf format files with Windows Explorer.

Kaspersky advises users not to open untrusted files with a *.wmf extension. Users should also configure their Internet Explorer security settings to "high" as a precaution, it recommends. Anti-virus firms are updating signature definition files to detect the risk, and protection is now largely in place. ®

Related stories

• NSA writes more potent malware than hacker (28 September 2007)
• MS anti-Trojan shield fails to protect older Offices (6 June 2007)
• Malware authors subvert Windows Update (11 May 2007)
• MySpace adware attack hits hard (21 July 2006)
• Virus writers at war (5 April 2006)
• Hackers use BBC story to bait IE exploit (31 March 2006)
• eEye issues workaround against unpatched IE flaw (28 March 2006)
• 'Critical' IE bug threatens PC users (27 March 2006)
• US man faces IRC Trojan charges (6 March 2006)
• UK.gov repels zero day WMF attack (24 January 2006)
• Trojan blitz poses as credit card warning (23 January 2006)
• More cracks appear in Windows (11 January 2006)
• Malware on tap scheme draws flak (10 January 2006)
• Microsoft backtracks on WMF patch (6 January 2006)
• Windows beats Linux - Unix on vulnerabilities - CERT (5 January 2006)
• Windows users waiting for serious fix (3 January 2006)
• World+dog scrambles to fight Windows flaw (3 January 2006)
• MS releases IE überpatch (14 December 2005)
• Trojan exploits unpatched IE flaw (1 December 2005)
• Exploit for unpatched IE vuln fuels hacker fears (19 August 2005)
• Firefox exploit targets zero day vulns (9 May 2005)