WMF Exploit. Update #2.

More on this delightful exploit, from the horses ... mouth.

http://www.microsoft.com/technet/security/advisory/912840.mspx

Snort sigs if you're interested:

Bleeding Snort Sigs