Thursday, January 05, 2006
Microsoft provides patch early
Microsoft has released a patch for the WMF vulnerability that could potentially result in an attacker taking control of a compromised system. Initially, Microsoft was going to wait and release the patch next Tuesday on "Patch Tuesday", however, based on customer feedback, they have decided to make it available immediately.
I have verified that it is available via Microsoft Update (Windows Update should be the same). I'd suspect that folks that use SUS and WUS will download it tonight (or the next time their servers check). It's also available on the Microsoft Download center should you want to use that.
You can read about the details of the vulnerability here. I'd recommend applying this update immediately. A reboot may be required once it has been applied. I can't say for certain, as I applied another update along with this one.