»www.theinquirer.net/?article=28590 : "...you can get blatted if you visit a site with an image file containing the exploit. IE users may automatically be infected. Firefox users can get infected if the image file is downloaded. There's more solid advice at F-Secure. We await a patch from Microsoft.
Washingtonpost.com's Security Fix blog includes a hack from iDefense that it says should help mitigate this threat by disabling the rendering of WMF files:
1. Click on the Start button on the taskbar. 2. Click on Run... 3. Type "regsvr32 /u shimgvw.dll" to disable. 4. Click ok when the change dialog appears.
