[Baron Munchausen]

All versions of Windows have this vulnerability. Even Windows 3.1 from the days before Microsoft had even noticed the internet! It's not truly a 'bug' but an intentional feature of Windows. It's actually possible to make code function calls from a WMF file because WMF files were designed for fancy functionality, but without any thought for security. This is yet another lesson on Internet Exploder. Don't Use It, Mmm'kay? People who surf with a non-Microsoft browser are dramatically less vulnerable. You can still be sent an email with a trojan in it, but at least you won't infect yourself in routine surfing.