Security Now Notes on WMF Exploit There is a “feature” in the Windows WMF format that allows the execution of arbitary code. It has been there since the beginning (at least 10 years) but only now is coming to light. It is extremely likely that exploitation of this hole will grow. It is also likely that this hole has been used in the past but has not been publicised. A patch is available now from MS Windows Update. Patch your system, update your virus and spyware scanners.

Apple are not above the same tricks as the rest of the software industry. You want QuickTime for Windows so you head over to Apple’s QuickTime page. However, if you’re using a browser on Windows and you follow the download link on Apple’s QuickTime page you can only download QuickTime and the wretched iTunes for Windoze. Does this remind you of anything? There is a standalone download page but Apple does not link to it. Google knows all.