WMF Exploits - Third New Version emerges this week
As noted in the following advisory, a third “new and improved” version of the WMF exploit was published on January 15, 2006. Thankfully, Microsoft has provided MS06-001 protection in the emergency release during early January.
The new link for Exploit “C” can be found in the general FrSIRT advisory. The exploit link could be potentially harmful, if you import this code into your browser environment, so please be careful.
http://www.frsirt.com/english/advisories/2005/3086