Spyware embedded in image files.
The US net watchdog, the Computer Emergency Response Center (Cert), and security firms have issued warnings about certain types of image files called Windows Metafiles.
Experts said numerous websites were taking advantage of the flaw to sneak into computers and install spyware.
Microsoft has said it is looking into the issue.
Spam bots
The flaw centres on the way Microsoft’s operating system handles Windows Metafiles (.wmf). These are image files that can contain both vector and bitmap-based picture information.
Apparently, sites are using it to try and steal credit card numbers as well as create zombi PCs that send out tons of spam emails. As of yet, there doesn’t seem to be a patch for it.
Bless dear old MicroMush and B.G.It won’t be the last!