New WMF exploit version spammed as Happy New Year greetings
Please note that the 2nd generation of the WMF exploit has been spammed out via email. It appears as a Happy New Year's greeting . This is briefly noted in McAfee's release for DAT 4464 which covers this new variant.
McAfee - DAT 4464 released early for new WMF version
An email message containing an Exploit-WMF built from this new code has been spammed. The message appears as follows:
Subject: Happy New Year
Body: picture of 2006
Attachment: HappyNewYear.jpg (actually a WMF file with a .JPG extension)